Skip to content
Black Duck logo

Black Duck

Claim this tool

Comprehensive application security for managing software risk and accelerating secure delivery.

Paid plans onlyVisit Website
Reviews onG2Capterra
58 reviews tracked·1 press mention

The Bottom Line

Price
Paid plans only. Compare plans

Key facts

  • Manages software risk and accelerates secure delivery.
  • Secures AI-generated code and the software supply chain.
  • Provides comprehensive application security testing and risk management.

Pros

  • Comprehensive coverage for various security aspects (AI, supply chain, open source)
  • Unified platform for intelligent risk management (Polaris)
  • Strong focus on compliance and risk reduction
  • Trusted by over 4,000 organizations worldwide
  • Recognized as a leader in application security testing

Cons

  • No explicit mention of pricing tiers or free trials on the provided pages
  • Requires contacting sales for detailed information, which can be a barrier for initial exploration

What is Black Duck?

Black Duck is a robust application security platform designed to help organizations manage software risk and accelerate secure delivery, particularly in an era of increasing AI-generated code and complex software supply chains. It provides tools for securing AI transformation by managing risks associated with AI-generated code, automating security across development stages, and boosting developer velocity without compromising innovation. The platform also focuses heavily on supply chain security, enabling users to protect all components, manage Software Bill of Materials (SBOMs), and ensure compliance. Beyond AI and supply chain security, Black Duck offers comprehensive AppSec risk management by centralizing visibility, streamlining security operations, and reducing complexity. It's particularly valuable for safety-critical software, ensuring flawless, compliant code with zero defects and total visibility. The platform integrates various security tools, including Black Duck Polaris for intelligent risk management, Coverity Static Analysis for secure code delivery, and Black Duck SCA for managing open source and third-party code risks.

Available on: Web

Ratings Across the Web

4.2(58 reviews)

Black Duck holds an aggregate rating of 4.2 out of 5 from 58 reviews across G2 and Capterra, last checked September 17, 2026.

Ratings aggregated from independent review platforms. Learn more

Key Features

  • AI transformation security
  • Software supply chain security
  • Software Bill of Materials (SBOM) management
  • Application Security (AppSec) risk management
  • Security for safety-critical software
  • Black Duck Polaris™ Platform (unified security tools)
  • Coverity® Static Analysis (SAST)
  • Black Duck® SCA (Software Composition Analysis)

Pricing Plans

Pricing checked Sep 23, 2026

Black Duck plans and prices, checked September 2026
PlanPriceDetails
Black Duck

Contact us

Reviews

Improve Your Thinking Patterns Using ChatGPT cover
$99Free with your review

Review Black Duck, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review
4.2/5

Across 58 verified user reviews on Capterra, G2

Add your hands-on experience using the offer above to help the next buyer.

Best Black Duck Alternatives

Top alternatives based on features, pricing, and user needs.

View full list →

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

Explore More

Black Duck FAQ

How does Black Duck assist with AI transformation?

Black Duck helps organizations secure their AI transformation by managing risks associated with AI-generated code. It automates security across development stages and aims to boost developer velocity without compromising innovation in AI-driven projects.

Which teams benefit most from using Black Duck?

Teams involved in security, development, and compliance, especially those working with safety-critical software, benefit most from Black Duck. It is designed for organizations that need to ensure flawless, compliant code with zero defects and total visibility across their applications.

How does Black Duck compare to Snyk for managing software supply chain risks?

Black Duck focuses on comprehensive supply chain security by protecting all components and managing Software Bill of Materials (SBOMs) to ensure compliance. While Snyk also addresses supply chain security, Black Duck emphasizes a unified platform for intelligent risk management across various security aspects, including AI-generated code.

What kind of integrations does Black Duck offer for security analysis?

Black Duck integrates various security tools, including Black Duck Polaris for intelligent risk management and Coverity Static Analysis for secure code delivery. It also incorporates Black Duck SCA for managing open source and third-party code risks within a unified platform.

How is Black Duck priced?

Black Duck is offered as a paid product, and it does not include a permanently free tier. Prospective users need to contact sales directly to obtain detailed information regarding its pricing structure.

Source: synopsys.com

Guides & Articles