Black Duck SAST
by Black DuckVerified
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
- Product Type
- Static Application Security Testing
- Deployment
- SaaS / Cloud / On-Premise
- Industries
- 4+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Black Duck SAST
Black Duck SAST is an enterprise-grade static application security testing solution engineered to analyze proprietary source code, identify security vulnerabilities, and enforce secure coding standards across modern enterprise software development pipelines. Powered by advanced static analysis engines, it examines codebases without executing them, identifying critical flaws such as SQL injection, Cross-Site Scripting, buffer overflows, and insecure cryptographic implementations early in the development lifecycle.
Categories & Subcategories
Key Features
4 capabilities that Black Duck SAST offers.
Proprietary code scanning
OWASP Top 10 analysis
Deep dataflow tracing
Use Cases
Static application security testing
Code auditing
AppSec compliance
Industries Served
Black Duck SAST is used across 4+ industries.
Cross-industry
Technology
FinTech
Software
Regions
Global
Integrations
Works with the tools teams already use
GitHub
GitLab
Jenkins
Azure DevOps
Jira
Polaris
Deployment Options
Flexible deployment to meet your needs
SaaSCloudOn-Premise
Platform & Access
What Black Duck SAST supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantYes
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
- PCIPCI DSS
- ISOISO 27001
OWASP Top 10CWE
- Supported platforms
- Source Code RepositoriesCI/CD Build Systems
- Operating systems
- LinuxWindowsCloud SaaS
- Browser support
- ChromeEdgeFirefoxSafari
- Languages supported
- EnglishJapaneseChinese
- Data residency
- Global; US; EU; APAC
- Deployment details
- Cloud; On-premises; Cloud SaaS; On-premises enterprise server
Black Duck SAST Reviews
No reviews yet
Be the first to share your experience with Black Duck SAST.
More Products from Black Duck
View all →Polaris Software Integrity Platform
What does Polaris Software Integrity Platform do? It covers unified cloud AppSec platform. See typical use cases, cloud deployment and how it compares to rivals.
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
Seeker
What does Seeker do? It covers code tracing and runtime API analysis. See typical use cases, cloud, on-premises or hybrid deployment and how it compares to rivals.
Coverity
Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.
Black Duck Software Composition Analysis
Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.
Defensics
Defensics is an automated protocol fuzz testing used for robust testing. Highlights include packet capture. Compare it with other Application Security Testing tools.
Black Duck SCA Complete
Looking for SCA software? Black Duck SCA Complete by Black Duck provides copyright audit and deep binary analysis for binary auditing. Compare features and alternatives.
Black Duck SCA
Black Duck SCA covers open-source vulnerability management, license compliance auditing and automated SBOM generation for SCA dependency scanning. Compare top SCA tools.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
OpenText Fortify Static Code Analyzer
byOpenText
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
Application SecurityView details
Checkmarx SAST
Evaluating Checkmarx SAST? See how this SAST tool handles source code scanning and best-fix recommendation, where it fits best and which alternatives to compare.
Application SecurityView details
AppScan Source
Get the facts on AppScan Source: IDE integration. Built for build automation gating. Compare it with other Application Security Testing options before you decide.
Application SecurityView details
Semgrep AppSec Platform
bySemgrep
Semgrep AppSec Platform: semantic SAST scanning and reachable SCA dependency analysis. Built for static code security testing. Compare Application Security alternatives.
Application SecurityView details