Fuzz testing is now a team sport
Security teams don’t fuzz test in isolation. QA engineers, security teams, protocol experts, and CI/CD pipelines all contribute to the process. Until now, collaborating through a shared Black Duck Defensics® environment, sharing test configurations, and gaining visibility into results wasn’t easy.
With the latest release, that changes. You can deploy Defensics as a shared, centrally managed service for your team, while keeping the lightweight, single machine option for individual work.
One product. Three deployment options.
Three ways to deploy Black Duck Defensics
The new Defensics platform with a fresh UI, project-based overview, and new reports is currently available in early access mode. It is currently not recommended for use in production environments.
Single user: Lightweight and local
If you’re a security researcher or developer running Defensics on your own machine, this release doesn’t change your workflow. You can update it, open the UI in your browser, and continue fuzzing as usual.
The previous Electron desktop application is replaced by a browser-based UI, but the experience is the same. There is minimal setup for personal use; it’s just Defensics, running the way it always has.
Ideal for: Individual researchers, laptop-based testing, and quick local setups
Multiuser: Defensics as a team service
For teams that need a shared fuzzing environment, the multiuser deployment turns Defensics into an on-premises service. Install it on a server, configure it once, and your team can access it through a browser, with no local installation required on each person’s machine.
An administrator bootstraps the service, creates user accounts, and assigns roles. From there, team members log in and work within their permissions.
Ideal for: Security teams with shared test labs who want an overview of tests per project
Classic Defensics Monitor: Full depth, full control
For teams with deep and customized test workflows or toolchains tightly integrated around Defensics Monitor, this remains the current, fully supported deployment. Defensics Monitor is the most full-featured option today, with the broadest protocol coverage and the most extensive configuration flexibility. Defensics Monitor has its own installer and continues to be actively maintained.
Reporting, dashboards, and overviews for customers are where Defensics Monitor is more conservative. Those investments are happening in the new Defensics browser-based platform. Defensics Monitor users who want richer visibility across teams and test results may find the multiuser deployment a natural next step over time, once it reaches full protocol parity.
Ideal for: Teams with established Defensics Monitor workflows, highly customized test automation, and organizations that need full protocol suite coverage today
Built-in user management
The multiuser deployment includes a user management panel, accessible directly in the Defensics UI.
Two roles are available in this release
- Administrator: Full access. Manages users, controls platform settings and license configuration, runs tests. Creates accounts, resets passwords, and unlocks users when needed.
- Tester: Full fuzzing access. Runs tests, manages test configurations, accesses results. Cannot manage other users or change platform settings.
Administrators can manage user accounts entirely within the Defensics interface. No external identity system is required or supported for this release.
Deployment model comparison
| Single User | Multiuser | Classic Monitor | |
| Interface | Browser | Browser | Defensics Monitor UI |
| Installer | black-duck-defensics-installer-yyyy.m.x | black-duck-defensics-installer-yyyy.m.x | defensics-installer-yyyy.m.x |
| Authentication | Optional, carried over from earlier setups | Username and password, with role-based access | Optional, token based |
| User management | Not included | Administrator manages users and roles | Not included |
| Network access | Local machine only | Shared; accessible over the network | Configurable |
| Reporting and dashboards | Modern | Modern | Classic |
| Protocol test suite coverage | 97% of suites | 97% of suites | Full suite coverage |
Coming soon to single user and multiuser Defensics: CAN, SNMP, WebApp, and gRPC SDK Express and SDK suites. SDK Express, CAN, and CAN FD are planned for the 2026.12.0 release.
Choosing the right deployment option
Use single user if
- You are new to Defensics and want the simplest possible setup to try it out
- You run Defensics on your own laptop or workstation
- You don’t need to share access with colleagues
Use multiuser if
- Your team runs tests from a shared lab or server
- You don’t want every user to separately install and configure Defensics
- You want centralized visibility into tests
Stay with Classic Monitor if
- Your workflows or automation are tightly integrated with Defensics Monitor
- You depend on its full configuration depth, including agent instrumentation and unlimited or feedback loop fuzzing
- You depend on protocol test suites for CAN, SNMP, WebApp, gRPC SDK Express, or SDK, until these land in Defensics
Please note: The new Defensics platform is currently in early access mode, with many improvements coming soon. It’s not recommended to run this platform in production environments at this time.
Getting started
Defensics, both single user and multiuser, is installed from a single installer. During installation, you can choose which deployment model to configure. The rest of the setup is guided.
Classic Defensics Monitor has its own installer and upgrade path, unchanged from previous releases.
