Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Black Duck SASTGitHub Code Scanning2 of 3 products

Side-by-side comparison of Black Duck SAST, GitHub Code Scanning
Product	Black Duck SAST by Black Duck View product	GitHub Code Scanning by GitHub View product
Overview
What it is	Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.	Evaluating GitHub Code Scanning? See how this SAST tool handles native CodeQL analysis and SARIF report ingestion, where it fits best and which alternatives to compare.
Product type	Static Application Security Testing	Developer-First Static Application Security Testing (SAST)
Best for	Cross-industry, Technology, FinTech, Software	Technology, Financial Services, Healthcare, Government, Manufacturing, Education, Retail, Telecommunications
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloudOn-Premise	SaaSCloudOn-Premise
Deployment details	Cloud; On-premises; Cloud SaaS; On-premises enterprise server	Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server
Data residency	Global; US; EU; APAC	United States; European Union; Customer-hosted options
Key features
What it offers	Static application security testing Proprietary code scanning OWASP Top 10 analysis Deep dataflow tracing Code auditing AppSec compliance	Native CodeQL analysis SARIF report ingestion Inline pull request annotations Automated branch scanning Custom query creation CWE classification Automated code vulnerability scanning Pull request security review
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: yes
Supported platforms	Source Code RepositoriesCI/CD Build Systems	GitHub repositoriesCI/CD runners (GitHub Actions, self-hosted)
Compliance	OWASP Top 10CWEPCI DSSISO 27001	SOC 1SOC 2 Type IIISO 27001NIST SP 800-218
Integrations & coverage
Integrations	GitHubGitLabJenkinsAzure DevOpsJiraPolaris	GitHub ActionsVisual Studio CodeJenkinsAzure DevOpsJiraSlack
Industries	Cross-industryTechnologyFinTechSoftware	TechnologyFinancial ServicesHealthcareGovernmentManufacturingEducation+2 more
Regions	Global	Global
Vendor
Company	Black Duck	GitHub
Headquarters	Burlington, Massachusetts, USA	San Francisco, California, USA
Company size	1,001-5,000	10,000+
Founded	2001	2008

Black Duck SAST

by Black Duck

View product

GitHub Code Scanning

by GitHub

View product

Overview

What it is

Black Duck SAST

Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.

GitHub Code Scanning

Evaluating GitHub Code Scanning? See how this SAST tool handles native CodeQL analysis and SARIF report ingestion, where it fits best and which alternatives to compare.

Product type

Black Duck SAST

Static Application Security Testing

GitHub Code Scanning

Developer-First Static Application Security Testing (SAST)

Best for

Black Duck SAST

Cross-industry, Technology, FinTech, Software

GitHub Code Scanning

Technology, Financial Services, Healthcare, Government, Manufacturing, Education, Retail, Telecommunications

Pricing

Pricing model

Black Duck SAST

Contact Vendor

GitHub Code Scanning

Contact Vendor

Free trial

Black Duck SAST

GitHub Code Scanning

Deployment

Deployment options

Black Duck SAST

SaaSCloudOn-Premise

GitHub Code Scanning

SaaSCloudOn-Premise

Deployment details

Black Duck SAST

Cloud; On-premises; Cloud SaaS; On-premises enterprise server

GitHub Code Scanning

Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server

Data residency

Black Duck SAST

Global; US; EU; APAC

GitHub Code Scanning

United States; European Union; Customer-hosted options

Key features

What it offers

Black Duck SAST

Static application security testing
Proprietary code scanning
OWASP Top 10 analysis
Deep dataflow tracing
Code auditing
AppSec compliance

GitHub Code Scanning

Native CodeQL analysis
SARIF report ingestion
Inline pull request annotations
Automated branch scanning
Custom query creation
CWE classification
Automated code vulnerability scanning
Pull request security review

Platform & access

API access

Black Duck SAST

GitHub Code Scanning

Single sign-on (SSO)

Black Duck SAST

GitHub Code Scanning

Role-based access (RBAC)

Black Duck SAST

GitHub Code Scanning

Multi-tenant

Black Duck SAST

GitHub Code Scanning

Mobile app

Black Duck SAST

GitHub Code Scanning

Supported platforms

Black Duck SAST

Source Code RepositoriesCI/CD Build Systems

GitHub Code Scanning

GitHub repositoriesCI/CD runners (GitHub Actions, self-hosted)

Compliance

Black Duck SAST

OWASP Top 10CWEPCI DSSISO 27001

GitHub Code Scanning

SOC 1SOC 2 Type IIISO 27001NIST SP 800-218

Integrations & coverage

Integrations

Black Duck SAST

GitHubGitLabJenkinsAzure DevOpsJiraPolaris

GitHub Code Scanning

GitHub ActionsVisual Studio CodeJenkinsAzure DevOpsJiraSlack

Industries

Black Duck SAST

Cross-industryTechnologyFinTechSoftware

GitHub Code Scanning

TechnologyFinancial ServicesHealthcareGovernmentManufacturingEducation+2 more

Regions

Black Duck SAST

Global

GitHub Code Scanning

Global

Vendor

Company

Black Duck SAST

Black Duck

GitHub Code Scanning

GitHub

Headquarters

Black Duck SAST

Burlington, Massachusetts, USA

GitHub Code Scanning

San Francisco, California, USA

Company size

Black Duck SAST

1,001-5,000

GitHub Code Scanning

10,000+

Founded

Black Duck SAST

2001

GitHub Code Scanning

2008