Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Black Duck SASTGitHub Secret Protection2 of 3 products

Side-by-side comparison of Black Duck SAST, GitHub Secret Protection
Product	Black Duck SAST by Black Duck View product	GitHub Secret Protection by GitHub View product
Overview
What it is	Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.	What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
Product type	Static Application Security Testing	Real-Time Developer Credential Protection & Push Protection Solution
Best for	Cross-industry, Technology, FinTech, Software	Technology, Financial Services, Healthcare, Government, Telecommunications
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: no
Deployment
Deployment options	SaaSCloudOn-Premise	SaaSCloudOn-Premise
Deployment details	Cloud; On-premises; Cloud SaaS; On-premises enterprise server	Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server
Data residency	Global; US; EU; APAC	United States; European Union; On-premises repository hosts
Key features
What it offers	Static application security testing Proprietary code scanning OWASP Top 10 analysis Deep dataflow tracing Code auditing AppSec compliance	Push protection intercept Partner secret verification Custom regex pattern definitions Historical commit scanning Automated revocation webhooks Bypass auditing Credential leak prevention git push interception
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: yes
Supported platforms	Source Code RepositoriesCI/CD Build Systems	GitHub CloudGitHub Enterprise ServerGit CLI
Compliance	OWASP Top 10CWEPCI DSSISO 27001	SOC 2 Type IIISO/IEC 27001PCI DSSFedRAMP
Integrations & coverage
Integrations	GitHubGitLabJenkinsAzure DevOpsJiraPolaris	GitHub ActionsAWSAzureGoogle CloudHashiCorp VaultSlack
Industries	Cross-industryTechnologyFinTechSoftware	TechnologyFinancial ServicesHealthcareGovernmentTelecommunications
Regions	Global	Global
Vendor
Company	Black Duck	GitHub
Headquarters	Burlington, Massachusetts, USA	San Francisco, California, USA
Company size	1,001-5,000	10,000+
Founded	2001	2008

Black Duck SAST

by Black Duck

View product

GitHub Secret Protection

by GitHub

View product

Overview

What it is

Black Duck SAST

Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.

GitHub Secret Protection

What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.

Product type

Black Duck SAST

Static Application Security Testing

GitHub Secret Protection

Real-Time Developer Credential Protection & Push Protection Solution

Best for

Black Duck SAST

Cross-industry, Technology, FinTech, Software

GitHub Secret Protection

Technology, Financial Services, Healthcare, Government, Telecommunications

Pricing

Pricing model

Black Duck SAST

Contact Vendor

GitHub Secret Protection

Contact Vendor

Free trial

Black Duck SAST

GitHub Secret Protection

Deployment

Deployment options

Black Duck SAST

SaaSCloudOn-Premise

GitHub Secret Protection

SaaSCloudOn-Premise

Deployment details

Black Duck SAST

Cloud; On-premises; Cloud SaaS; On-premises enterprise server

GitHub Secret Protection

Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server

Data residency

Black Duck SAST

Global; US; EU; APAC

GitHub Secret Protection

United States; European Union; On-premises repository hosts

Key features

What it offers

Black Duck SAST

Static application security testing
Proprietary code scanning
OWASP Top 10 analysis
Deep dataflow tracing
Code auditing
AppSec compliance

GitHub Secret Protection

Push protection intercept
Partner secret verification
Custom regex pattern definitions
Historical commit scanning
Automated revocation webhooks
Bypass auditing
Credential leak prevention
git push interception

Platform & access

API access

Black Duck SAST

GitHub Secret Protection

Single sign-on (SSO)

Black Duck SAST

GitHub Secret Protection

Role-based access (RBAC)

Black Duck SAST

GitHub Secret Protection

Multi-tenant

Black Duck SAST

GitHub Secret Protection

Mobile app

Black Duck SAST

GitHub Secret Protection

Supported platforms

Black Duck SAST

Source Code RepositoriesCI/CD Build Systems

GitHub Secret Protection

GitHub CloudGitHub Enterprise ServerGit CLI

Compliance

Black Duck SAST

OWASP Top 10CWEPCI DSSISO 27001

GitHub Secret Protection

SOC 2 Type IIISO/IEC 27001PCI DSSFedRAMP

Integrations & coverage

Integrations

Black Duck SAST

GitHubGitLabJenkinsAzure DevOpsJiraPolaris

GitHub Secret Protection

GitHub ActionsAWSAzureGoogle CloudHashiCorp VaultSlack

Industries

Black Duck SAST

Cross-industryTechnologyFinTechSoftware

GitHub Secret Protection

TechnologyFinancial ServicesHealthcareGovernmentTelecommunications

Regions

Black Duck SAST

Global

GitHub Secret Protection

Global

Vendor

Company

Black Duck SAST

Black Duck

GitHub Secret Protection

GitHub

Headquarters

Black Duck SAST

Burlington, Massachusetts, USA

GitHub Secret Protection

San Francisco, California, USA

Company size

Black Duck SAST

1,001-5,000

GitHub Secret Protection

10,000+

Founded

Black Duck SAST

2001

GitHub Secret Protection

2008