Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Veracode Static Analysis by Veracode View product | Black Duck SAST by Black Duck View product |
|---|---|---|
| Overview | ||
| What it is | Free trial available. Veracode Static Analysis by Veracode offers audit reports and binary scanning. Compare features, use cases and leading SAST alternatives. | Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools. |
| Product type | Enterprise Static Code & Binary Analysis (SAST) | Static Application Security Testing |
| Best for | Large Enterprise, Defense, Tech, Healthcare, Government | Cross-industry, Technology, FinTech, Software |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | SaaSCloudOn-Premise |
| Deployment details | Cloud (SaaS); Binary Analyzers; Cloud SaaS platform | Cloud; On-premises; Cloud SaaS; On-premises enterprise server |
| Data residency | US; EU; Global | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Java.NETC/C++PythonJavaScriptGoVisual StudioEclipse+1 more | Source Code RepositoriesCI/CD Build Systems |
| Compliance | FedRAMPSOC 2 Type IIISO 27001PCI-DSSHIPAA | OWASP Top 10CWEPCI DSSISO 27001 |
| Integrations & coverage | ||
| Integrations | Visual StudioEclipseJiraJenkins | GitHubGitLabJenkinsAzure DevOpsJiraPolaris |
| Industries | Large EnterpriseDefenseTechHealthcareGovernment | Cross-industryTechnologyFinTechSoftware |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Veracode | Black Duck |
| Headquarters | Burlington, Massachusetts, USA | Burlington, Massachusetts, USA |
| Company size | 1,000+ | 1,001-5,000 |
| Founded | 2006 | 2001 |
Overview
What it is
Veracode Static Analysis
Free trial available. Veracode Static Analysis by Veracode offers audit reports and binary scanning. Compare features, use cases and leading SAST alternatives.Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.Product type
Veracode Static Analysis
Enterprise Static Code & Binary Analysis (SAST)Black Duck SAST
Static Application Security TestingBest for
Veracode Static Analysis
Large Enterprise, Defense, Tech, Healthcare, GovernmentBlack Duck SAST
Cross-industry, Technology, FinTech, SoftwarePricing
Pricing model
Veracode Static Analysis
Contact VendorBlack Duck SAST
Contact VendorFree trial
Veracode Static Analysis
Free trial: yesBlack Duck SAST
Free trial: yesDeployment
Deployment options
Veracode Static Analysis
Black Duck SAST
Deployment details
Veracode Static Analysis
Cloud (SaaS); Binary Analyzers; Cloud SaaS platformBlack Duck SAST
Cloud; On-premises; Cloud SaaS; On-premises enterprise serverData residency
Veracode Static Analysis
US; EU; GlobalBlack Duck SAST
Global; US; EU; APACKey features
What it offers
Veracode Static Analysis
- Enterprise-scale static code analysis
- Binary scanning
- Multi-language vulnerability detection
- Audit reports
- SAST
- Application Security Testing
- Binary Analysis
- DevSecOps
Black Duck SAST
- Static application security testing
- Proprietary code scanning
- OWASP Top 10 analysis
- Deep dataflow tracing
- Code auditing
- AppSec compliance
Platform & access
API access
Veracode Static Analysis
API access: yesBlack Duck SAST
API access: yesSingle sign-on (SSO)
Veracode Static Analysis
SSO: yesBlack Duck SAST
SSO: yesRole-based access (RBAC)
Veracode Static Analysis
RBAC: yesBlack Duck SAST
RBAC: yesMulti-tenant
Veracode Static Analysis
Multi-tenant: yesBlack Duck SAST
Multi-tenant: yesMobile app
Veracode Static Analysis
Mobile app: noBlack Duck SAST
Mobile app: noSupported platforms
Veracode Static Analysis
Black Duck SAST
Compliance
Veracode Static Analysis
Black Duck SAST
Integrations & coverage
Integrations
Veracode Static Analysis
Black Duck SAST
Industries
Veracode Static Analysis
Black Duck SAST
Regions
Veracode Static Analysis
Black Duck SAST
Vendor
Company
Veracode Static Analysis
VeracodeBlack Duck SAST
Black DuckHeadquarters
Veracode Static Analysis
Burlington, Massachusetts, USABlack Duck SAST
Burlington, Massachusetts, USACompany size
Veracode Static Analysis
1,000+Black Duck SAST
1,001-5,000Founded
Veracode Static Analysis
2006Black Duck SAST
2001