Veracode IP Address Ranges

Getting Started Guide

Veracode recommends that you whitelist certain IP address ranges and URLs to ensure there is no disruption in your ability to access Veracode features and products.

If your organization requires that you whitelist every domain and subdomain for your users to have access to the Veracode Platform, whitelist the following URLs to ensure there is no disruption in service:
  • https://web.analysiscenter.veracode.com
  • https://analysiscenter.veracode.com
  • https://api.veracode.com
  • https://ui.analysiscenter.veracode.com
  • https://web.veracode.io
  • https://elearning.veracode.com (eLearning users only)
  • https://downloads.veracode.com (to download Greenlight and other integrations plugins)
  • https://jira-cloud-addon.integrations.veracode.com (to download the Veracode Integration for Jira Cloud)

Access to Virtual Scan Appliances (VSA)

You must update your firewall or other gateway device to allow traffic to Veracode via 192.157.28.50. If your VSAs call back directly to jobservice.veracode.com without going through a firewall or other gateway device, you do not have to do anything at this time.

Access to Dynamic Application Security Testing

  • You must add 34.195.146.191 to your whitelist to use the Veracode Dynamic Analysis service.
  • You must add 192.157.28.60 to your whitelist to continue uninterrupted service for ongoing and new DynamicDS scans from Veracode.

Access to analysiscenter.veracode.com via DNS

If you are using statically assigned IP addresses to reach analysiscenter.veracode.com, you must add 192.157.28.40 to the entry.

Access to analysiscenter.veracode.com via APIs

If you are using statically assigned IP addresses to reach analysiscenter.veracode.com or if you have hardcoded the IP addresses in your API, you must include 192.157.28.40.

Support and Assistance

If you have questions, contact support@veracode.com.