Veracode is very new in DAST and IAST, Checkmarx is offering that since longer time and is more experienced.

I don’t know any. Either they do quality checks (which can also contain some vulnerabilities, but not to a great extent) or security scans, but not both, afaik. But my market knowledge is limited.