Black Duck Home Page
Black Duck Home Page
True Scale Application Security
  • Support
  • English
  • 日本語
  • 简体中文
close search bar

Sorry, not available in this language yet

close language selection
  • English
  • 日本語
  • 简体中文
  • Solutions
  • Products
  • Services
  • Partners
  • Resources
  • Blog
  • Company
  • Contact Sales

Company

go back

About Black Duck

  • Leadership
  • Newsroom
  • Blog
  • Partners
  • Careers
  • Contact Sales
Gartner Magic Quadrant

2023 Gartner® Magic Quadrant™ for AppSec Testing Read more

Forrester Wave Leader 2023 SAST Recognition

Forrester Wave Leader for SAST Read more

Forrester Wave Leader 2023 Software Analysis

Forrester Wave Leader for SCA Read more

close sub navigation

Products

go back

Integrated SaaS Platform

  • Polaris Platform
  • fAST Static
  • fAST SCA
  • fAST Dynamic

Tools

  • Coverity Static
  • Black Duck SCA
  • Continuous Dynamic
  • Seeker Interactive
  • Software Risk Manager ASPM
  • Defensics Protocol Fuzzing

Integrations

  • Code Sight IDE Plug-in
  • SCM Integrations
  • Build & CI Tool Integrations
  • Developer Workflow Integrations
  • 3rd-Party AST Tool Integrations
  • Cloud Deployment Integrations
Gartner Magic Quadrant 2023 Gartner® Magic Quadrant™ for AppSec Testing See why Black Duck is a Leader
close sub navigation

Solutions

go back

Use Cases

  • AI-generated code
  • API Security Testing
  • AppSec Program Consolidation
  • Application Security Testing
  • DevSecOps
  • Software Supply Chain Security
  • Manage Enterprise AppSec Risk
  • Container Security
  • Open Source License Compliance
  • M&A Due Diligence
  • Quality and Security Standards Compliance

By Technology

  • Static Analysis (SAST)
  • Software Composition Analysis (SCA)
  • Dynamic Analysis (DAST)
  • Interactive Analysis (IAST)
  • Penetration Testing
  • Mobile Application Security Testing (MAST)
  • Application Security Posture Management (ASPM)
  • Fuzz Testing Solutions

By Industry

  • Automotive
  • Financial Services
  • IoT & Embedded
  • Medical Devices
  • Public Sector

By Role

  • Dev and DevOps Teams
  • Security Teams
  • Legal Teams
close sub navigation

Services

go back

Security Testing Services

  • Overview
  • Penetration Testing

Security Program Services

  • Threat & Risk Assessments
  • Program Strategy & Planning
  • Security Training

Audit Services

  • Open Source & Security Audits

Customer Success

  • Overview
  • Implementation & Deployment
  • Premium and Designated Support
close sub navigation

Resources

go back

Latest Updates

  • Newsroom
  • Blog
  • Cybersecurity Research Center

Customer Resources

  • Support
  • Documentation
  • Black Duck Academy
  • Search Knowledge Base
  • Community Q&A

Other Resources

  • Datasheets
  • eBooks
  • Case Studies
  • Research & Reports
  • Webinars
  • White Papers
  • AppSec Glossary
  • Resource Library
Gartner Magic Quadrant 2023 Gartner® Magic Quadrant™ for AppSec Testing See why Black Duck is a Leader
close sub navigation
  • Home
    • Code Sight
    • Dynamic Application Security Testing
    • Services
    • Blog Home
    • About Black Duck
    • Sitemap
  • Blog Home
AppSec Risk Management

3

Stories

2

Writers

Top Writers
Fred Bals

Fred Bals

Mike McGuire

Mike McGuire


Last Published


Transitive dependencies are exponentially increasing open source software risk
Jun 09, 2025/3 min read

Transitive dependencies are exponentially increasing open source software risk

By Mike McGuire
Tags: AppSec Risk Management, Black Duck SCA
Q&A: What You Need to Know About Open Source Software Risk in 2025
May 22, 2025/5 min read

Q&A: What You Need to Know About Open Source Software Risk in 2025

By Fred Bals
Tags: Threat & Risk Assessment , AppSec Best Practices , Manage Security Risks
Software Vulnerability Snapshot Report Thumbnail
Nov 12, 2024/3 min read

Software Vulnerability Snapshot Report Findings

By Fred Bals
Tags: DAST , Security News & Trends , Web AppSec
3

Stories

2

Writers


Top Writers
Fred Bals

Fred Bals

Mike McGuire

Mike McGuire


Last Published