Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Black Duck, a segment of the Synopsys Software Integrity Group, stands out as a prominent provider of application security testing (AST) solutions. Their extensive array of offerings encompasses tools for static analysis, software composition analysis (SCA), dynamic analysis, and interactive analysis, which assist organizations in detecting and addressing security vulnerabilities throughout the software development life cycle. By streamlining the identification and management of open-source software, Black Duck guarantees adherence to security and licensing regulations. Their solutions are meticulously crafted to enable organizations to foster trust in their software while effectively managing application security, quality, and compliance risks at a pace that aligns with business demands. With Black Duck, businesses are equipped to innovate with security in mind, delivering software solutions confidently and efficiently. Furthermore, their commitment to continuous improvement ensures that clients remain ahead of emerging security challenges in a rapidly evolving technological landscape.

Description

Enhance your security framework for open source by implementing automated best practices, creating an integrated workflow that benefits both security and development teams. This cloud-native security solution minimizes risk and safeguards revenue while allowing developers to maintain their pace. The dependency firewall effectively isolates harmful open source elements before they can affect developers and infrastructure, thus preserving data integrity, company assets, and brand reputation. Our comprehensive policy engine examines various threat indicators, including recognized vulnerabilities, licensing details, and rules defined by the customer. Gaining visibility into the open-source components utilized in applications is essential for mitigating potential vulnerabilities. The Software Composition Analysis (SCA) and dashboard reporting provide stakeholders with a complete perspective and prompt updates regarding the existing environment. Additionally, you can detect the introduction of new open-source licenses within the codebase and automatically monitor compliance issues involving licenses, effectively managing any problematic or unlicensed packages. By adopting these measures, organizations can significantly improve their ability to respond to security challenges in real time.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Apache Maven Yes 
Bizzy Yes 
BlueFlag Security Yes 
C Yes 
C++ Yes 
Digital.ai Release Yes 
GitHub No 
Gradle Yes 
Jenkins No 
Jira Service Management Yes 
Longbow Yes 
Maven No 
OpenText Static Application Security Testing Yes 
Rezilion Yes 
Slack No 
ThreadFix Yes 
Tromzo Yes 
Vulcan Cyber Yes 
npm No 

Integrations

Apache Maven No 
Bizzy No 
BlueFlag Security No 
C No 
C++ No 
Digital.ai Release No 
GitHub Yes 
Gradle No 
Jenkins Yes 
Jira Service Management No 
Longbow No 
Maven Yes 
OpenText Static Application Security Testing No 
Rezilion No 
Slack Yes 
ThreadFix No 
Tromzo No 
Vulcan Cyber No 
npm Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

€1100 per month
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Black Duck

Founded

2002

Country

United States

Website

www.blackduck.com

Vendor Details

Company Name

Bitfront

Country

Sweden

Website

bytesafe.dev/

Product Features

IT Asset Management

Asset Tracking Yes 
Audit Management Yes 
Compliance Management Yes 
Configuration Management No 
Contract/License Management Yes 
Cost Tracking No 
Depreciation Management No 
IT Service Management No 
Inventory Management Yes 
Maintenance Management No 
Procurement Management No 
Requisition Management No 
Supplier Management Yes 

License Management

Automatic SKU Recognition No 
Central LM Server No 
Copy Protection No 
History Tracking Yes 
Node Management No 
Online Activation Yes 
Portable License No 
Sarbanes-Oxley Compliance Yes 
Timing Rights No 
Trial License Yes 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Product Features

Continuous Integration

Build Log No 
Change Management No 
Configuration Management No 
Continuous Delivery Yes 
Continuous Deployment Yes 
Debugging No 
Permission Management No 
Quality Assurance Management No 
Testing Management No 

DevOps

Approval Workflow Yes 
Dashboard No 
KPIs No 
Policy Management No 
Portfolio Management No 
Prioritization Yes 
Release Management No 
Timeline Management No 
Troubleshooting Reports No 

License Management

Automatic SKU Recognition No 
Central LM Server No 
Copy Protection No 
History Tracking No 
Node Management No 
Online Activation No 
Portable License No 
Sarbanes-Oxley Compliance No 
Timing Rights No 
Trial License No 

Source Code Management

Access Controls/Permissions No 
Bug Tracking No 
Build Automation No 
Change Management No 
Code Review No 
Collaboration Yes 
Continuous Integration Yes 
Repository Management No 
Version Control No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Statistical Analysis

Analytics No 
Association Discovery No 
Compliance Tracking No 
File Management No 
File Storage No 
Forecasting No 
Multivariate Analysis No 
Regression Analysis No 
Statistical Process Control No 
Statistical Simulation No 
Survival Analysis No 
Time Series No 
Visualization No 

Vulnerability Management

Asset Discovery No 
Asset Tagging No 
Network Scanning No 
Patch Management No 
Policy Management No 
Prioritization Yes 
Risk Management No 
Vulnerability Assessment No 
Web Scanning No 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring Yes 
Continuous Monitoring Yes 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting Yes 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Revenera SCA Reviews

Revenera SCA

Revenera

Alternatives

PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
Revenera SCA Reviews

Revenera SCA

Revenera