Chose Veracode
The first solution we considered was Sonar, but the number of manual things to do made us go for Veracode. Veracode currently helps us in SAST, SCA, and DAST. All in the same solution and platform, and it organizes like a security hub.
Invited by the Vendor
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
