Black Duck Software

Black Duck is a commercial software security company focused on application security testing and software risk insight. Its official website presents the company as serving organizations that need to assess and manage security, compliance, licensing, and quality risks in software. The company says that more than 4,000 organizations choose Black Duck and that its work is backed by more than 20 years of human-verified intelligence. Black Duck’s offering spans application security testing and software supply-chain security. The website describes the Black Duck Polaris Platform as a unified application security platform and promotes security testing for software developed with AI, as well as visibility and risk monitoring for software supply chains. Its stated capabilities and topics include software composition analysis, static and dynamic application security testing, software bills of materials, vulnerability management, open-source security, and code quality and compliance. The company positions its services for organizations developing mission-critical and regulated software. It emphasizes combining speed, accuracy, and compliance, and says its approach can include both cloud and on-premises testing. Black Duck presents its history as helping organizations adopt open-source software safely, bringing security technologies together into a comprehensive application security platform, and supporting testing across embedded software and web applications. The supplied materials do not establish Black Duck’s founding year, founder, headquarters, ownership, corporate parent, or listing status. Its official website is active and currently promotes the Polaris platform and application security solutions.

Black Duck describes its background as rooted in helping organizations use open-source software safely and securely. Its official company page says that it brought disparate technologies together to build what it calls the first comprehensive application security platform. The company also highlights work across both embedded software and web applications, and describes bridging cloud and on-premises testing as part of its development. The supplied official materials do not provide a founding date, identify a founder, or give a dated sequence of ownership or corporate events. They do, however, describe a company with more than 20 years of human-verified intelligence and a customer base of more than 4,000 organizations. These are company-reported figures from the current website, rather than a dated corporate history. Black Duck’s present-day communications place its offering in the context of AI-assisted software development and increasing software regulation. Its website promotes the Black Duck Polaris Platform for application security and describes capabilities addressing software security, supply-chain visibility, compliance, licensing, and code quality. It also highlights testing options spanning cloud and on-premises environments. The supplied materials do not establish when these offerings were launched or provide dates for other milestones.

Application security for organizations seeking high-fidelity testing, software risk insight, and security and compliance coverage across modern and regulated software development.

• Black Duck Polaris Platform

  A platform promoted by Black Duck for application security.

• Software composition analysis

  A software security offering identified in the official website’s page title.

• Static and dynamic application security testing

  Application security testing categories identified in the official website’s page title.

1. 1Application Security Testing | Software Composition Analysis & Open Source Security | SAST/DAST/SCA | Black Duckblackduck.com
2. 2About Us | Black Duckblackduck.com
3. 3Legal | Black Duckblackduck.com
4. 4Jobs at Black Duck | Black Duck Careersblackduck.com