When assessing the two solutions, reviewers found SOOS easier to use, set up, and administer. Reviewers also preferred doing business with SOOS overall.
Black duck serves as a good platform to identify third party software risk factors. It can be easily integrated as of part of CI/CD tools to scan security, license risk etc. It shows the exact break up of all the risky components of the binaries.
It is difficult and tedious to use. That it is incapable of recognizing subtle differences in versions that do and don't matter. That its tasks require multiple steps that could be simplified.
Really friendly UI - loads of info. Support was also great.
Seems to over-include packages, creating false positives for things that aren't in our BOM. Need to understand how to configure the system to get a more accurate result. Also, would like a CSV export of vulnerability data to make it possible to create...
Black duck serves as a good platform to identify third party software risk factors. It can be easily integrated as of part of CI/CD tools to scan security, license risk etc. It shows the exact break up of all the risky components of the binaries.
Really friendly UI - loads of info. Support was also great.
It is difficult and tedious to use. That it is incapable of recognizing subtle differences in versions that do and don't matter. That its tasks require multiple steps that could be simplified.
Seems to over-include packages, creating false positives for things that aren't in our BOM. Need to understand how to configure the system to get a more accurate result. Also, would like a CSV export of vulnerability data to make it possible to create...