The AST market is mature, but the boundaries are shifting. AI-generated code, CNAPP platforms, and supply-chain exposure are reshaping where and how testing happens.
THE PYRAMID for Application Security Testing, published by FOURCASTERS and Lionfish Tech Advisors, maps the seven components every AST program needs and names which vendors actually deliver them.
Veracode was classified as a "Difference Maker" in the Buyer's Guide 2026 vendor pyramid, positioned in the top tier. The designation recognizes vendors with distinctive and unique market impact.
If you are rethinking your AST strategy, this report gives you the framework to evaluate which vendors can support a real program, not just run a scanner.