Sorry, not available in this language yet

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Program Consolidation | Simplify your application security program.
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage Enterprise AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality and Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing Solutions | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Devices | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

Sitemap

Solutions - Use Cases

AI Code Detector for Software Development

API Security Testing Solutions

AppSec Consolidation - Security Tool Consolidation

Application Security Testing Services & Tools

DevSecOps Services and Solutions

Software Supply Chain Security Solutions - SCS Security

Enterprise Application Security Solutions

Cloud Application Security Solutions

Open Source Security & License Compliance Tools

M&A Due Diligence Software

Achieve Software Security Compliance Standards

Solutions - By Role

DevOps Security Solutions for Development Teams

Security Teams - AppSec Programs & Software

Law Firm Security Solutions

Products - Integrated AppSec Solutions

Polaris Application Security Platform

Code Sight - SAST & SCA IDE Plugin

Development and DevOps Integrations

Services - Testing Services

Application Security Testing Services

Services - Audit Services

Open Source Software Audit Services

Resources - Latest Updates

Black Duck News

Software and Application Security Blog

Cybersecurity Research Center

Company

Black Duck Customer Success

Jobs at Black Duck

Resources - Glossary

What is Penetration Testing and How Does it Work?

What is Ethical Hacking and How Does it Work?

What Is the Software Development Life Cycle (SDLC) and How Does It Work?

What is Fuzz Testing and How Does it Work?

What is Open Source Software and How Does it Work?

What is Cyber Security?

What is Software Supply Chain Security?

What is DevSecOps?

What is Red Teaming?

What is Threat Modeling?

Solutions - By Technology

SAST Testing - Static Analysis Tools for Code & Apps

Software Composition Analysis: SCA Solutions

Dynamic Application Security Testing (DAST)

Seeker Interactive Web-Based Application Security

Web Application Penetration Testing Services

Mobile Application Security Testing Tools

Software Risk Manager: Standardize Security Risk

Defensics Fuzz Testing Tools for Security

Solutions - By Industry

Automotive Security Solutions

Financial Services Security Solutions

Embedded and IoT Security Solutions

Software Security for Medical Devices

Software Quality for Governent and Public Sector

Products - Tools

Coverity Static Analysis Software

Black Duck Software Composition Analysis (SCA)

Services - Program Services

Application & Architectural Risk Assessments

Application Security Strategy & Planning

Application Security Training for Developers

Implementation Services & Deployment Support

Application Threat Modeling

Red Teaming Cybersecurity Testing

Building Security Maturity Model (BSIMM)

Partners

Black Duck Partners

Solution Providers

Technology Alliance Partners

Strategic Alliance Partners

Resources - Customer Resouces

Black Duck Community Resources

Black Duck Documentation Portal

Black Duck Software Security Academy

Software Security & Appsec eBooks

Application Security Customer Stories & Case Studies

Application Security & Software Quality Reports

Application Security Testing Webinars

Software Security & Appsec Whitepapers

Glossary of Application Security Terms

Application Security Resources

Top Blog Posts

Top 4 Software Development Methodologies

Python pickling: What it is and how to use it securely

Top 10 Free Pen Tester Tools and How They Work

Five Types of Software Licenses You Need to Understand

Spectre Exploit Detection: Static Analysis Tool & Code Examples

Abuse Cases: How to Think Like a Hacker

DevSecOps Best Practices Strategy Guide

How XML External Entity Injection Works

What Are Software Security Requirements?

Secure SDLC 101: Mastering software development life cycle security

4 Approaches to Vulnerability Remediation