Chillisoft signs A/NZ distribution deal for Veracode security line

Chillisoft has signed Veracode as a distribution vendor across Australia and New Zealand. The deal, announced without financial terms or duration, adds application security testing to Chillisoft's channel portfolio. That omission is standard practice. It also means the commercial weight of the agreement cannot be assessed from the statement alone.

What exactly will partners sell?

Chillisoft partners gain access to Veracode's full application security portfolio. The catalog includes:

• Static analysis (SAST) — scanning source code for flaws before release
• Dynamic analysis (DAST) — testing running applications
• Software composition analysis (SCA) — inventorying open-source components and their known vulnerabilities
• Runtime protection — defending applications in production
• AI-powered application risk management

Distribution alone does not guarantee uptake. Chillisoft will also fund channel enablement, sales support, technical training and professional services to help partners deploy the products. The statement does not specify how many partners will receive this training, or on what timeline.

What did the executives say?

Chillisoft Australia CEO Gavin Lawless framed the deal as portfolio strategy, not opportunism. "Veracode's reputation for application security excellence makes it a valuable addition to our company's growing vendor portfolio," he said.

Lawless pushed the argument further in a second statement. "As software continues to become the foundation of every modern business, application security can no longer be treated as a specialist requirement. It is now a core component of cyber resilience and risk management," he said.

He also credited Veracode with "helping organisations identify and remediate software vulnerabilities while enabling developers to move at the speed the business demands," adding that its approach "aligns perfectly" with Chillisoft's strategy of bringing market-leading security solutions to partners.

Vendor alignment claims are routine in distribution announcements. The proof will appear in partner certification counts and revenue disclosures, neither of which accompanied this release.

Why does Veracode want this channel?

Veracode Asia Pacific and Japan regional vice president Mat Kaddour called the partnership an important milestone in the vendor's regional growth strategy. "Chillisoft's strong cyber security focus, technical expertise and extensive partner ecosystem make it the ideal distributor to help expand Veracode's reach across the region," he said.

"Together, we look forward to helping organisations build and maintain secure software in an increasingly complex threat landscape," Kaddour added. The statement did not quantify Veracode's current A/NZ footprint, partner count, or revenue targets for the region.

What is not in the announcement?

Three things stand out by their absence:

• No pricing or margin structure. Partners cannot yet gauge commercial attractiveness from public material.
• No exclusivity terms. Veracode may retain or add other distributors in A/NZ; nothing in the statement rules this out.
• No adoption metrics. Neither party committed to partner counts, certification targets or deployment goals by a date.

For CIOs and security leaders in the region, the practical effect is access: one more route to procure Veracode's testing stack through local integrators. For Chillisoft partners, it is a training and margin question. The strategic claims — "core component of cyber resilience," "ideal distributor" — are directional, not measurable.