抱歉，尚不支持此语言

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Device | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

Black Duck被“Forrester Wave™ 评为2023年静态应用安全测试领导者

基于对我们静态应用安全测试 (SAST) 解决方案“Coverity®”的评估结果，Black Duck在Forrester Wave™ 2023年第三季度静态应用安全测试中被评为领导者。

报告分析了11家在静态应用安全测试（SAST）市场最有影响力的供应商，并且根据三个高级类别中的26条标准对他们进行评估：现有产品、策略和市场占有率。

今年的报告侧重于为SAST客户提供建议，帮助他们寻找能够提高开发人员工作速度、保护新兴技术、以及自动执行修复流程的提供商。

下载报告

Coverity提供面向开发人员、高可行、质量安全影响高的扫描结果，确保为开发人员提供最可行的结果。若安全专业人员希望更全面的结果，或对误报有较高容忍度，可以通过设置扫描配置来调整分析。软件风险管理平台可将所有扫描类型的结果和来自其他供应商的结果集中在一起。安全专家可以使用该工具确定其产品组合中优先级最高的问题，并通过过滤选项（如策略、漏洞存在时间、预测状态和基于审查分类历史的ML置信度评级）来排除可能的误报。正如一位客户所说，定制检查器也有助于Coverity保持其‘极低的误报率’。"

Forrester Wave™: | 静态应用安全测试，Forrester Research, Inc.

2023年第3季度

在11家被评估的SAST供应商中，Black Duck获得：

“现有产品”类别第二高分
“检测”标准最高分
“线路图”、“合作伙伴生态系统”以及“支持服务及产品“标准中获得满分
“策略”和“市场占有率”类别并列第二高分
"产品安全"标准最高分
"DevSecOps 工作流"标准并列第二高分
"收入"标准最高分

下载该报告，了解SAST对于确保快速交付安全代码的重要性，同时了解客户需要寻求获得哪些SAST功能，例如修复建议、策略管理以及供应商路线图的重要性。

立即下载