PRODUCTS
Static Application Security Testing (SAST)
Black Duck Static Application Security Testing (SAST) analyzes source code, bytecode, and compiled code without executing the application to identify security vulnerabilities, coding defects, and weaknesses early in the development lifecycle. By integrating automated security analysis into development and CI/CD workflows, SAST enables organizations to detect and remediate vulnerabilities before they reach production, reducing security risks and the cost of fixing issues later in the software development process.
Black Duck Binary Analysis (BDBA)
Black Duck Binary Analysis (BDBA) is a software composition and security analysis solution designed to identify open-source components, vulnerabilities, and licensing risks directly within binary software. It provides organizations with visibility into third-party and embedded software, even when source code is unavailable, helping them assess software supply chain risks and ensure that applications meet security and compliance requirements before deployment or distribution.
Dynamic Application Security Testing (DAST)
Black Duck Dynamic Application Security Testing (DAST) evaluates running web applications and APIs to identify security vulnerabilities that may not be detected through source code analysis alone. By testing applications from an external perspective, DAST helps organizations discover exploitable weaknesses and validate the security of applications in development, testing, and production environments.
Software Composition Analysis (SCA)
Black Duck Software Composition Analysis (SCA) provides comprehensive visibility and control over open-source and third-party components used throughout the software development lifecycle. It identifies known vulnerabilities, license risks, and outdated components, while helping organizations generate and manage Software Bills of Materials (SBOMs) to improve software supply chain security and compliance.