Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Black Duck CodeSight by Black Duck View product | GitHub Advanced Security by GitHub View product |
|---|---|---|
| Overview | ||
| What it is | Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors. | GitHub Advanced Security: custom query creation and automated pull requests. Built for static application security testing. Compare Application Security alternatives. |
| Product type | IDE Security Analysis Plugin | Native Developer-First Application Security Platform |
| Best for | Cross-industry, Software, Technology, Software Engineering, IT Development | Technology, Financial Services, Healthcare, Government, Retail, Telecommunications, E-commerce |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | Cloud | SaaSCloudOn-Premise |
| Deployment details | Local IDE / Developer workstation; IDE desktop extension / developer plugin | Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Enterprise Cloud; GitHub Enterprise Server (on-premises) |
| Data residency | Local developer workstation | United States; European Union; Regional data residency options |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Visual StudioVS CodeIntelliJ IDEAEclipse | GitHub CloudGitHub Enterprise Server |
| Compliance | OWASPCWESANS Top 25 | SOC 1 Type IISOC 2 Type IIISO/IEC 27001FedRAMP Tailored |
| Integrations & coverage | ||
| Integrations | Visual StudioVS CodeIntelliJ IDEAEclipseCoveritySCA | GitHub ActionsVisual Studio CodeJiraMicrosoft SentinelDatadogSlack |
| Industries | Cross-industrySoftwareTechnologySoftware EngineeringIT Development | TechnologyFinancial ServicesHealthcareGovernmentRetailTelecommunications+1 more |
| Regions | Global | Global |
| Vendor | ||
| Company | Black Duck | GitHub |
| Headquarters | Burlington, Massachusetts, USA | San Francisco, California, USA |
| Company size | 1,001-5,000 | 10,000+ |
| Founded | 2001 | 2008 |
Overview
What it is
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.GitHub Advanced Security
GitHub Advanced Security: custom query creation and automated pull requests. Built for static application security testing. Compare Application Security alternatives.Product type
Black Duck CodeSight
IDE Security Analysis PluginGitHub Advanced Security
Native Developer-First Application Security PlatformBest for
Black Duck CodeSight
Cross-industry, Software, Technology, Software Engineering, IT DevelopmentGitHub Advanced Security
Technology, Financial Services, Healthcare, Government, Retail, Telecommunications, E-commercePricing
Pricing model
Black Duck CodeSight
Contact VendorGitHub Advanced Security
Contact VendorFree trial
Black Duck CodeSight
Free trial: yesGitHub Advanced Security
Free trial: noDeployment
Deployment options
Black Duck CodeSight
GitHub Advanced Security
Deployment details
Black Duck CodeSight
Local IDE / Developer workstation; IDE desktop extension / developer pluginGitHub Advanced Security
Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Enterprise Cloud; GitHub Enterprise Server (on-premises)Data residency
Black Duck CodeSight
Local developer workstationGitHub Advanced Security
United States; European Union; Regional data residency optionsKey features
What it offers
Black Duck CodeSight
- Real-time IDE code analysis
- Open-source dependency scanning
- Secret detection
- Instant remediation tips
- Real-time in-editor security scanning
- Early vulnerability remediation
GitHub Advanced Security
- CodeQL semantic code analysis
- Secret scanning with push protection
- Dependabot vulnerability alerts
- Automated pull requests
- Security overview dashboards
- Custom query creation
- Static application security testing
- Secret leakage prevention
Platform & access
API access
Black Duck CodeSight
API access: yesGitHub Advanced Security
API access: yesSingle sign-on (SSO)
Black Duck CodeSight
SSO: yesGitHub Advanced Security
SSO: yesRole-based access (RBAC)
Black Duck CodeSight
RBAC: yesGitHub Advanced Security
RBAC: yesMulti-tenant
Black Duck CodeSight
Multi-tenant: noGitHub Advanced Security
Multi-tenant: yesMobile app
Black Duck CodeSight
Mobile app: noGitHub Advanced Security
Mobile app: yesSupported platforms
Black Duck CodeSight
GitHub Advanced Security
Compliance
Black Duck CodeSight
GitHub Advanced Security
Integrations & coverage
Integrations
Black Duck CodeSight
GitHub Advanced Security
Industries
Black Duck CodeSight
GitHub Advanced Security
Regions
Black Duck CodeSight
GitHub Advanced Security
Vendor
Company
Black Duck CodeSight
Black DuckGitHub Advanced Security
GitHubHeadquarters
Black Duck CodeSight
Burlington, Massachusetts, USAGitHub Advanced Security
San Francisco, California, USACompany size
Black Duck CodeSight
1,001-5,000GitHub Advanced Security
10,000+Founded
Black Duck CodeSight
2001GitHub Advanced Security
2008