Sorry, not available in this language yet

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Program Consolidation | Simplify your application security program.
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage Enterprise AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality and Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing Solutions | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Devices | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

Application Security Customer Stories

Learn about MEGA International's story

Our customers span every sector, from small application vendors to large enterprises in the financial services and automotive industries to federal government agencies. But all have one thing in common—they want to build trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands.

See how our customers build trust in software

OpenText

Hear how OpenText is integrating Black Duck into their systems across the organization.

Entersekt

Hear how Entersekt uses Black Duck to work smarter.

SAP

Hear how SAP uses Coverity to secure their software.

Explore by topic

View All

Building Security Into DevOps✕

DAST✕

Fuzz Testing✕

IAST✕

SAST✕

SCA✕

Securing the Software Supply Chain✕

Security Consulting and Services✕

SAST

Continual Code Improvement with Coverity SAST

SCA

Ensuring Software Reliability and Security from Design Through Development

IAST

Eliminating Vulnerabilities Early in the SDLC

SCA

Ensure Secure and Compliant Software Code

IAST

Parkeon Delivers Secure Payment Solutions With Seeker

SCA

Reduce Operational Risks With Improved Open Source Governance

Securing the Software Supply Chain

Extending a Secure SDLC to Remediate Open Source Security Issues

SAST

Improving scan speeds while maintaining CI development velocity

Security Consulting and Services

Ensuring Citigroup developers get the AppSec training they need

SCA

Ensuring the security of FinTech apps from design through deployment

DAST

Document Logistix Combines SAST and DAST to Ensure Security of Sensitive Customer Data

SCA

Holistic Application Security with Coverity and Black Duck

DAST

Securing Digital Applications and Improving Compliance with Continuous Dynamic

DAST

ZPE Systems achieves the industry's highest security level with Black Duck

SCA

Ensure Full Open Source Compliance With Black Duck

Fuzz Testing

Releasing Secure Code That Meets Rigorous Standards

Security Consulting and Services

Partnering with Black Duck to assure the security of Password Safe

Securing the Software Supply Chain

Managing & Mitigating Open Source Vulnerabilities with Black Duck SCA

SAST

Helping developers ensure code quality and security

SCA

Exposing licensing and dependency conflicts in real time

Securing the Software Supply Chain

Addressing open source security while maintaining DevOps velocity

SCA

A Robust Open Source Compliance Program—The Key to Customer Satisfaction

DAST

How a Top Financial Firm Scaled Its Application Security Program and Accelerated Digital Transformation

Security Consulting and Services

How a Global Retailer Scaled Its Application Security Program and Accelerated Digital Transformation

SCA

Improving Productivity with Black Duck

Securing the Software Supply Chain

ClickFox Gains Insight Into Open Source Code Security With Black Duck

SCA

Ensuring standards compliance and reducing license risk with Black Duck

Security Consulting and Services

CGI simplifies AppSec results with Black Duck Software Risk Manager

Security Consulting and Services

OPPO Strengthens Its Software Engineering System

Securing the Software Supply Chain

FINRA Improves Development Efficiencies, and Tightens Up Open Source Security

Securing the Software Supply Chain

Trend Micro: Delivering Open Source Cybersecurity

SAST

Making Code Quality a Business Priority with Coverity Static Analysis

SCA

Enhancing Code Quality and Security

Security Consulting and Services

Redesigning an Implantable Medical Device Communication Protocol

Coverity is a cornerstone in building secure C code as part of our security development lifecycle."

Uwe Sodan

TIP Governance, Code Analysis Team Lead SAP

Having a tool that lets us look at our code and look at what issues could be introduced enables us to be a lot more informed and have a higher degree of confidence that when we release software we’re not introducing additional risks."

Ricard Kelly

DevOps lead, Copperleaf

Black Duck met Entersekt’s checklist of what we needed in an open source vulnerability management solution better than any other vendor."

Philip Botha

Quality Assurance Manager at Entersekt

We really want to push the envelope of security. Working with Black Duck helped us move closer to that goal."

Nathan Coleman

Software Security Engineer Rally Health

Black Duck named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing

Gartner Peer Insights Customers’ Choice constitute the subjective opinions of individual end-user reviews, ratings, and data applied against a documented methodology; they neither represent the views of, nor constitute an endorsement by, Gartner or its affiliates.

Build trust in your software

Let's talk