Companies such as Fortify, whose products only scan program source code, aren't able to find certain classes of security flaw, according to Veracode. The company argues its approach of scanning ...