Black Duck

Application security platform including SAST and open source risk management.

Pricing: custom
Open source: No

Editorial review

Black Duck has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): SAST, DAST, SCA, application security, open source securityVerified

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): SaaSVerified

Pricing · Licensing

Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): customVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Static analysis (SAST), Software composition analysis (SCA), Dynamic application security testing (DAST), Interactive application security testing (IAST), Fuzz testingVerified

Audience · Use · Case

Best for(Neutral editorial summary): Enterprise application security testing with SAST, SCA, DAST, IAST, and software supply chain securityVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): enterpriseVerified
Primary use cases(build;monitor;automate): Application security testing, Open source license compliance, Software supply chain security, AI-generated code securityVerification pending

Vendor · Maintainer

Founded year(2012): 2002Verified
Headquarters country(US): United StatesVerified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.