Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Contrast Application Security Platform View product | Black Duck SAST by Black Duck View product |
|---|---|---|
| Overview | ||
| What it is | Contrast Application Security Platform delivers automated SCA for API security. Explore its Application Security capabilities, deployment choices and top competitors. | Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools. |
| Product type | Unified DevSecOps & Runtime Application Security Platform | Static Application Security Testing |
| Best for | Financial Services, Healthcare, Technology, Insurance, E-Commerce, Retail | Cross-industry, Technology, FinTech, Software |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | SaaSCloudOn-Premise |
| Deployment details | Cloud SaaS; On-premises; Hybrid; SaaS; Customer-hosted; Hybrid | Cloud; On-premises; Cloud SaaS; On-premises enterprise server |
| Data residency | United States; European Union; AWS regions | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Web applicationsREST APIsMicroservicesServerless functions | Source Code RepositoriesCI/CD Build Systems |
| Compliance | SOC 2 Type IIISO 27001PCI DSSHIPAAFedRAMP ready | OWASP Top 10CWEPCI DSSISO 27001 |
| Integrations & coverage | ||
| Integrations | GitHubGitLabJenkinsJiraAzure DevOpsSplunkDatadogSlack | GitHubGitLabJenkinsAzure DevOpsJiraPolaris |
| Industries | Financial ServicesHealthcareTechnologyInsuranceE-CommerceRetail | Cross-industryTechnologyFinTechSoftware |
| Regions | Global | Global |
| Vendor | ||
| Company | Contrast Security | Black Duck |
| Headquarters | Baltimore, Maryland, USA | Burlington, Massachusetts, USA |
| Company size | 501-1,000 | 1,001-5,000 |
| Founded | 2014 | 2001 |
Overview
What it is
Contrast Application Security Platform
Contrast Application Security Platform delivers automated SCA for API security. Explore its Application Security capabilities, deployment choices and top competitors.Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.Product type
Contrast Application Security Platform
Unified DevSecOps & Runtime Application Security PlatformBlack Duck SAST
Static Application Security TestingBest for
Contrast Application Security Platform
Financial Services, Healthcare, Technology, Insurance, E-Commerce, RetailBlack Duck SAST
Cross-industry, Technology, FinTech, SoftwarePricing
Pricing model
Contrast Application Security Platform
Contact VendorBlack Duck SAST
Contact VendorFree trial
Contrast Application Security Platform
Free trial: yesBlack Duck SAST
Free trial: yesDeployment
Deployment options
Contrast Application Security Platform
Black Duck SAST
Deployment details
Contrast Application Security Platform
Cloud SaaS; On-premises; Hybrid; SaaS; Customer-hosted; HybridBlack Duck SAST
Cloud; On-premises; Cloud SaaS; On-premises enterprise serverData residency
Contrast Application Security Platform
United States; European Union; AWS regionsBlack Duck SAST
Global; US; EU; APACKey features
What it offers
Contrast Application Security Platform
- Runtime code instrumentation
- Interactive testing (IAST)
- Automated SCA
- Static code analysis (SAST)
- Runtime self-protection (RASP)
- Developer IDE integration
- DevSecOps pipeline automation
- API security
Black Duck SAST
- Static application security testing
- Proprietary code scanning
- OWASP Top 10 analysis
- Deep dataflow tracing
- Code auditing
- AppSec compliance
Platform & access
API access
Contrast Application Security Platform
API access: yesBlack Duck SAST
API access: yesSingle sign-on (SSO)
Contrast Application Security Platform
SSO: yesBlack Duck SAST
SSO: yesRole-based access (RBAC)
Contrast Application Security Platform
RBAC: yesBlack Duck SAST
RBAC: yesMulti-tenant
Contrast Application Security Platform
Multi-tenant: yesBlack Duck SAST
Multi-tenant: yesMobile app
Contrast Application Security Platform
Mobile app: noBlack Duck SAST
Mobile app: noSupported platforms
Contrast Application Security Platform
Black Duck SAST
Compliance
Contrast Application Security Platform
Black Duck SAST
Integrations & coverage
Integrations
Contrast Application Security Platform
Black Duck SAST
Industries
Contrast Application Security Platform
Black Duck SAST
Regions
Contrast Application Security Platform
Black Duck SAST
Vendor
Company
Contrast Application Security Platform
Contrast SecurityBlack Duck SAST
Black DuckHeadquarters
Contrast Application Security Platform
Baltimore, Maryland, USABlack Duck SAST
Burlington, Massachusetts, USACompany size
Contrast Application Security Platform
501-1,000Black Duck SAST
1,001-5,000Founded
Contrast Application Security Platform
2014Black Duck SAST
2001