Skip to content
Black Duck logo

Black Duck

Unclaimed

Comprehensive application security for managing software risk and accelerating secure delivery.

Visit Website
Reviews onG2Capterra
58 reviews tracked·1 press mentions

The Bottom Line

Entry price

Paid plans only

Biggest pro

Comprehensive coverage for various security aspects (AI, supply chain, open source)

Biggest con

No explicit mention of pricing tiers or free trials on the provided pages

TL;DR - Black Duck

  • Manages software risk and accelerates secure delivery.
  • Secures AI-generated code and the software supply chain.
  • Provides comprehensive application security testing and risk management.
Pricing: Paid only
Best for: Enterprises & pros
4.2/5 across review platforms

What is Black Duck?

Editorial review
Black Duck is a robust application security platform designed to help organizations manage software risk and accelerate secure delivery, particularly in an era of increasing AI-generated code and complex software supply chains. It provides tools for securing AI transformation by managing risks associated with AI-generated code, automating security across development stages, and boosting developer velocity without compromising innovation. The platform also focuses heavily on supply chain security, enabling users to protect all components, manage Software Bill of Materials (SBOMs), and ensure compliance. Beyond AI and supply chain security, Black Duck offers comprehensive AppSec risk management by centralizing visibility, streamlining security operations, and reducing complexity. It's particularly valuable for safety-critical software, ensuring flawless, compliant code with zero defects and total visibility. The platform integrates various security tools, including Black Duck Polaris for intelligent risk management, Coverity Static Analysis for secure code delivery, and Black Duck SCA for managing open source and third-party code risks.

Available on: Web

Pros & Cons

Pros

  • Comprehensive coverage for various security aspects (AI, supply chain, open source)
  • Unified platform for intelligent risk management (Polaris)
  • Strong focus on compliance and risk reduction
  • Trusted by over 4,000 organizations worldwide
  • Recognized as a leader in application security testing

Cons

  • No explicit mention of pricing tiers or free trials on the provided pages
  • Requires contacting sales for detailed information, which can be a barrier for initial exploration

Ratings Across the Web

4.2(58 reviews)

Ratings aggregated from independent review platforms. Learn more

Key Features

AI transformation securitySoftware supply chain securitySoftware Bill of Materials (SBOM) managementApplication Security (AppSec) risk managementSecurity for safety-critical softwareBlack Duck Polaris™ Platform (unified security tools)Coverity® Static Analysis (SAST)Black Duck® SCA (Software Composition Analysis)

Pricing Plans

Black Duck

Contact us

Reviews

Improve Your Thinking Patterns Using ChatGPT cover
$99Free with your review

Review Black Duck, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review
4.2/5

Across 58 verified user reviews on Capterra, G2

Add your hands-on experience using the offer above to help the next buyer.

Best Black Duck Alternatives

Top alternatives based on features, pricing, and user needs.

View full list →

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

Explore More

Black Duck FAQ

How does Black Duck assist with AI transformation?

Black Duck helps organizations secure their AI transformation by managing risks associated with AI-generated code. It automates security across development stages and aims to boost developer velocity without compromising innovation in AI-driven projects.

Which teams benefit most from using Black Duck?

Teams involved in security, development, and compliance, especially those working with safety-critical software, benefit most from Black Duck. It is designed for organizations that need to ensure flawless, compliant code with zero defects and total visibility across their applications.

How does Black Duck compare to Snyk for managing software supply chain risks?

Black Duck focuses on comprehensive supply chain security by protecting all components and managing Software Bill of Materials (SBOMs) to ensure compliance. While Snyk also addresses supply chain security, Black Duck emphasizes a unified platform for intelligent risk management across various security aspects, including AI-generated code.

What kind of integrations does Black Duck offer for security analysis?

Black Duck integrates various security tools, including Black Duck Polaris for intelligent risk management and Coverity Static Analysis for secure code delivery. It also incorporates Black Duck SCA for managing open source and third-party code risks within a unified platform.

How is Black Duck priced?

Black Duck is offered as a paid product, and it does not include a permanently free tier. Prospective users need to contact sales directly to obtain detailed information regarding its pricing structure.

Source: synopsys.com

Guides & Articles