Black Duck CodeSight
by Black DuckVerified
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
- Product Type
- IDE Security Analysis Plugin
- Deployment
- Cloud
- Industries
- 5+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Black Duck CodeSight
Black Duck CodeSight is an integrated developer security plugin designed to bring real-time static application security testing and software composition analysis directly into integrated development environments. By scanning source code and open-source dependencies as developers write code, it empowers software engineers to identify and resolve security vulnerabilities, code quality issues, and licensing risks early in the software development lifecycle.
Categories & Subcategories
Key Features
4 capabilities that Black Duck CodeSight offers.
Open-source dependency scanning
Secret detection
Instant remediation tips
Use Cases
Real-time in-editor security scanning
Early vulnerability remediation
Industries Served
Black Duck CodeSight is used across 5+ industries.
Cross-industry
Software
Technology
Software Engineering
IT Development
Regions
Global
Integrations
Works with the tools teams already use
Visual Studio
VS Code
IntelliJ IDEA
Eclipse
Coverity
SCA
Deployment Options
Flexible deployment to meet your needs
Cloud
Platform & Access
What Black Duck CodeSight supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantNo
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
- OWASPOWASP
CWESANS Top 25
- Supported platforms
- Visual StudioVS CodeIntelliJ IDEAEclipse
- Operating systems
- WindowsmacOSLinux
- Browser support
- Desktop IDE interface
- Languages supported
- EnglishJapaneseChinese
- Data residency
- Local developer workstation
- Deployment details
- Local IDE / Developer workstation; IDE desktop extension / developer plugin
Black Duck CodeSight Reviews
No reviews yet
Be the first to share your experience with Black Duck CodeSight.
More Products from Black Duck
View all →Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Polaris Software Integrity Platform
What does Polaris Software Integrity Platform do? It covers unified cloud AppSec platform. See typical use cases, cloud deployment and how it compares to rivals.
Seeker
What does Seeker do? It covers code tracing and runtime API analysis. See typical use cases, cloud, on-premises or hybrid deployment and how it compares to rivals.
Coverity
Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.
Black Duck Software Composition Analysis
Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.
Defensics
Defensics is an automated protocol fuzz testing used for robust testing. Highlights include packet capture. Compare it with other Application Security Testing tools.
Black Duck SCA Complete
Looking for SCA software? Black Duck SCA Complete by Black Duck provides copyright audit and deep binary analysis for binary auditing. Compare features and alternatives.
Black Duck SCA
Black Duck SCA covers open-source vulnerability management, license compliance auditing and automated SBOM generation for SCA dependency scanning. Compare top SCA tools.
Product Resources
No public resources listed yet.
Explore More Products
Other cybersecurity products listed on Cyber Rank.
OpenText Fortify Static Code Analyzer
byOpenText
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
Application SecurityView details
Snyk
bySnyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
DevSecOps & Software Supply ChainView details
Mend.io Platform
byMend
Mend.io Platform covers unified application & supply chain security and SAST, SCA, secrets, container for DevSecOps. Compare top Application Security tools.
Application SecurityView details
Snyk Open Source
bySnyk
Try Snyk Open Source free: a software composition analysis platform with automated fix pull requests. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details