Product Avatar Image

Black Duck

Show rating breakdown
109 reviews
  • 7 profiles
  • 10 categories
Average star rating
4.2
Serving customers since
2024
Profile Filters

All Products & Services

Product Avatar Image
Black Duck Coverity Static

65 reviews

Coverity static analysis by Synopsys helps development and security teams find and fix defects and security flaws in code as it’s being written. Coverity is highly accurate, supports thousands of developers, and quickly analyzes large projects exceeding 100 million lines of code, helping your teams build secure, high-quality software faster.

Product Avatar Image
Black Duck SCA

32 reviews

Black Duck by Synopsys provides a comprehensive software composition analysis (SCA) solution for managing security, quality, and license compliance risk that comes from the use of open source and third-party code in applications and containers. Black Duck gives you unmatched visibility into third-party code, enabling you to control it across your software supply chain and throughout the application life cycle.

Product Avatar Image
Black Duck Developer Security Training

6 reviews

Synopsys eLearning provides interactive digital courseware designed to help development teams learn and implement best practices for secure coding.

Product Avatar Image
Black Duck Defensics

3 reviews

Test running apps and services for common security weaknesses and vulnerabilities using malformed inputs to detect flaws. Leverage fully automated tests across 250+ test suites, protocol-specific attack patterns and automatic test mutation

Product Avatar Image
Black Duck Seeker Interactive

2 reviews

Accurate, automated security testing for your web applications. The industrys first IAST solution with active verification and sensitive-data tracking for web-based applications.

Product Avatar Image
Black Duck Application Security Services

1 review

Synopsys technology is at the heart of innovations that are changing the way we live and work. T

Product Avatar Image
Black Duck Continuous Dynamic

0 reviews

Dynamic Application Security Testing (DAST) uses penetration testing while web applications are running to simulate an attack by a skilled and motivated attacker.

Profile Name

Star Rating

63
37
6
2
1

Black Duck Reviews

Review Filters
Profile Name
Star Rating
63
37
6
2
1
Md Sarfaraz H.
MH
Md Sarfaraz H.
Dynatrace SRE | DQL query| Dynatrace Certified | Performance Monitoring
07/26/2026
Validated Reviewer
Review source: G2 invite
Incentivized Review

Reliable Open Source Security Tool with Strong CI/CD Integration

I like that Black Duck SCA makes it easy to identify vulnerable open-source dependencies and keeps track of newly discovered security issues. The reports are clear, and the CI/CD integration fits well into the development workflow. It also helps with license compliance, which is a big plus. The AI-powered insights are useful for understanding and prioritizing risks. The only downside is the pricing—it can be expensive, especially for smaller teams, but the features and visibility it provides make it worthwhile for larger organizations.
Sonal K.
SK
Sonal K.
Head of Strategic Initiatives at Secure Blink - Heuristic AppSec Management Platform | Expert Dojo W23
07/20/2026
Validated Reviewer
Verified Current User
Review source: G2 invite
Incentivized Review

Accurate Vulnerability Insights and Remediation—A Must-Have SCA Platform

Black Duck is the world leader for its SCA platform. The platform gives accurate vulnerabilities, line-to-line, along with correct remediations to fix the code. Must to have in your organisation.
Verified User in Computer Software
UC
Verified User in Computer Software
06/28/2026
Validated Reviewer
Review source: G2 invite
Incentivized Review

Excellent Visibility into Open-Source Vulnerabilities

Black Duck provides excellent visibility into open-source vulnerabilities. It makes it very easy to track our dependencies and confirm we aren’t shipping code that contains known security flaws.

About

Contact

HQ Location:
Burlington, US

Social

What is Black Duck?

Black Duck Software is a company specializing in open source security and license compliance management. It provides solutions that help organizations identify and mitigate risks associated with open source software usage in their applications. Black Duck's offerings include automated tools for open-source vulnerability detection, compliance tracking, and risk assessment, allowing businesses to manage open source components effectively and safely. By delivering comprehensive insights into code security, the company aims to enhance software quality and maintain compliance with industry regulations. You can learn more about their services and products by visiting their website at http://www.blackducksoftware.com/.

Details

Year Founded
2024