Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Black Duck Software Composition AnalysisCheckmarx SCA2 of 3 products

Side-by-side comparison of Black Duck Software Composition Analysis, Checkmarx SCA
Product	Black Duck Software Composition Analysis by Black Duck View product	Checkmarx SCA by Checkmarx View product
Overview
What it is	Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.	Checkmarx SCA from Checkmarx focuses on Dependency Security. Key capabilities: SBOM creation and license risk governance. Compare it with the leading SCA alternatives.
Product type	Open-Source Risk & License Management	Open-Source Dependency & Supply Chain Defense
Best for	Cross-industry, Technology, Software Development	Software Engineering, DevSecOps, DevSecOps Teams
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloudOn-Premise	SaaSCloud
Deployment details	Cloud; On-premises; Cloud SaaS; On-premises enterprise server	Cloud (SaaS); Package Registries; Cloud SaaS; Package registries
Data residency	Global; US; EU; APAC	US; EU; Global
Key features
What it offers	Open-source dependency scanning License compliance tracking CVE prioritization CI/CD policy enforcement Open-source vulnerability management License tracking SBOM creation	Software composition analysis Open-source library scanning SBOM creation License risk governance SCA Software Supply Chain Security Dependency Security SBOM
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Source CodePackage RegistriesCI/CD Pipelines	npmMavenNuGetPyPIGoGitHubGitLabDocker+1 more
Compliance	Open-Source ComplianceSPDXISO 27001	Executive Order 14028SOC 2 Type IIISO 27001PCI-DSS
Integrations & coverage
Integrations	GitHubGitLabBitbucketJenkinsAzure DevOpsJira	npmMavenNuGetPyPIGitHubDocker
Industries	Cross-industryTechnologySoftware Development	Software EngineeringDevSecOpsDevSecOps Teams
Regions	Global	GlobalUSEU
Vendor
Company	Black Duck	Checkmarx
Headquarters	Burlington, Massachusetts, USA	Tel Aviv, Israel
Company size	1,001-5,000	1,001-5,000
Founded	2001	2006

Black Duck Software Composition Analysis

by Black Duck

View product

Checkmarx SCA

by Checkmarx

View product

Overview

What it is

Black Duck Software Composition Analysis

Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.

Checkmarx SCA

Checkmarx SCA from Checkmarx focuses on Dependency Security. Key capabilities: SBOM creation and license risk governance. Compare it with the leading SCA alternatives.

Product type

Black Duck Software Composition Analysis

Open-Source Risk & License Management

Checkmarx SCA

Open-Source Dependency & Supply Chain Defense

Best for

Black Duck Software Composition Analysis

Cross-industry, Technology, Software Development

Checkmarx SCA

Software Engineering, DevSecOps, DevSecOps Teams

Pricing

Pricing model

Black Duck Software Composition Analysis

Contact Vendor

Checkmarx SCA

Contact Vendor

Free trial

Black Duck Software Composition Analysis

Checkmarx SCA

Deployment

Deployment options

Black Duck Software Composition Analysis

SaaSCloudOn-Premise

Checkmarx SCA

SaaSCloud

Deployment details

Black Duck Software Composition Analysis

Cloud; On-premises; Cloud SaaS; On-premises enterprise server

Checkmarx SCA

Cloud (SaaS); Package Registries; Cloud SaaS; Package registries

Data residency

Black Duck Software Composition Analysis

Global; US; EU; APAC

Checkmarx SCA

US; EU; Global

Key features

What it offers

Black Duck Software Composition Analysis

Open-source dependency scanning
License compliance tracking
CVE prioritization
CI/CD policy enforcement
Open-source vulnerability management
License tracking
SBOM creation

Checkmarx SCA

Software composition analysis
Open-source library scanning
SBOM creation
License risk governance
SCA
Software Supply Chain Security
Dependency Security
SBOM

Platform & access

API access

Black Duck Software Composition Analysis

Checkmarx SCA

Single sign-on (SSO)

Black Duck Software Composition Analysis

Checkmarx SCA

Role-based access (RBAC)

Black Duck Software Composition Analysis

Checkmarx SCA

Multi-tenant

Black Duck Software Composition Analysis

Checkmarx SCA

Mobile app

Black Duck Software Composition Analysis

Checkmarx SCA

Supported platforms

Black Duck Software Composition Analysis

Source CodePackage RegistriesCI/CD Pipelines

Checkmarx SCA

npmMavenNuGetPyPIGoGitHubGitLabDocker+1 more

Compliance

Black Duck Software Composition Analysis

Open-Source ComplianceSPDXISO 27001

Checkmarx SCA

Executive Order 14028SOC 2 Type IIISO 27001PCI-DSS

Integrations & coverage

Integrations

Black Duck Software Composition Analysis

GitHubGitLabBitbucketJenkinsAzure DevOpsJira

Checkmarx SCA

npmMavenNuGetPyPIGitHubDocker

Industries

Black Duck Software Composition Analysis

Cross-industryTechnologySoftware Development

Checkmarx SCA

Software EngineeringDevSecOpsDevSecOps Teams

Regions

Black Duck Software Composition Analysis

Global

Checkmarx SCA

GlobalUSEU

Vendor

Company

Black Duck Software Composition Analysis

Black Duck

Checkmarx SCA

Checkmarx

Headquarters

Black Duck Software Composition Analysis

Burlington, Massachusetts, USA

Checkmarx SCA

Tel Aviv, Israel

Company size

Black Duck Software Composition Analysis

1,001-5,000

Checkmarx SCA

1,001-5,000

Founded

Black Duck Software Composition Analysis

2001

Checkmarx SCA

2006