Black Duck

About Black Duck

Black Duck provides True Scale Application Security for the software industry, focusing on visibility into open source components, licenses, and vulnerabilities to secure the software supply chain. The company offers cloud-based and on-premises security analysis tools that cover SAST, DAST, and SCA, helping organizations manage risk, ensure compliance, and accelerate development in AI-powered environments. With solutions spanning SBOM management, open source license compliance, and governance across the software lifecycle, Black Duck serves regulated industries and enterprises seeking scalable security at speed. Headquartered in the United States, the company emphasizes enterprise risk posture and secure software delivery.