Veracode provides visibility into the status of our applications at every phase of development throughout the software development lifecycle. We heavily use the Veracode Greenlight plugin for Visual Studio to scan and check our code as we write it. Veracode also helps us to develop our applications securely. We have configured our QA websites to be scanned by Veracode so that we do not push anything into production that is insecure. All of our dynamic scans are set up to scan our QA environments, just to be safe. Our QA and production environments have very similar configurations, so we do not push anything to production without first testing it in QA.