Black Duck SCA
by Black DuckVerified
Black Duck SCA covers open-source vulnerability management, license compliance auditing and automated SBOM generation for SCA dependency scanning. Compare top SCA tools.
- Product Type
- Software Composition Analysis
- Deployment
- SaaS / Cloud / On-Premise
- Industries
- 5+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Black Duck SCA
Black Duck SCA is an industry-leading software composition analysis solution designed to identify, manage, and mitigate open-source security vulnerabilities, license compliance risks, and code quality issues across enterprise software applications and supply chains. By analyzing source code, package manifests, and binary artifacts, it provides comprehensive visibility into all third-party and open-source components utilized within corporate software projects.
Categories & Subcategories
Where Black Duck SCA is ranked
Featured in 1 Cyber Rank ranking.
Key Features
4 capabilities that Black Duck SCA offers.
License compliance auditing
Automated SBOM generation
Build checks
Use Cases
SCA dependency scanning
SBOM generation
License risk governance
Industries Served
Black Duck SCA is used across 5+ industries.
Cross-industry
Technology
FinTech
Enterprise Software
Automotive
Regions
Global
Integrations
Works with the tools teams already use
Black Duck KnowledgeBase
GitHub
GitLab
Jenkins
Jira
Deployment Options
Flexible deployment to meet your needs
SaaSCloudOn-Premise
Platform & Access
What Black Duck SCA supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantYes
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
- SOCSOC 2
Open Source LicensingSPDXCycloneDX
- Supported platforms
- Open-Source DependenciesPackage ManagersCI/CD
- Operating systems
- LinuxWindowsCloud SaaS
- Browser support
- ChromeEdgeFirefoxSafari
- Languages supported
- EnglishJapaneseChinese
- Data residency
- Global; US; EU; APAC
- Deployment details
- Cloud; On-premises; Cloud SaaS; On-premises server software
Black Duck SCA Reviews
No reviews yet
Be the first to share your experience with Black Duck SCA.
More Products from Black Duck
View all →Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Polaris Software Integrity Platform
What does Polaris Software Integrity Platform do? It covers unified cloud AppSec platform. See typical use cases, cloud deployment and how it compares to rivals.
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
Seeker
What does Seeker do? It covers code tracing and runtime API analysis. See typical use cases, cloud, on-premises or hybrid deployment and how it compares to rivals.
Coverity
Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.
Black Duck Software Composition Analysis
Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.
Defensics
Defensics is an automated protocol fuzz testing used for robust testing. Highlights include packet capture. Compare it with other Application Security Testing tools.
Black Duck SCA Complete
Looking for SCA software? Black Duck SCA Complete by Black Duck provides copyright audit and deep binary analysis for binary auditing. Compare features and alternatives.
Product Resources
No public resources listed yet.
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Veracode Software Composition Analysis
byVeracode
Get the facts on Veracode Software Composition Analysis: SBOM export. Built for Dependency Security. Compare it with other SBOM options before you decide.
DevSecOps & Software Supply ChainView details
Snyk Open Source
bySnyk
Try Snyk Open Source free: a software composition analysis platform with automated fix pull requests. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details
Nexus Lifecycle
bySonatype
Nexus Lifecycle: automated CI/CD policy gates and expert component intelligence. Built for automated SBOM generation. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
Mend SCA
byMend
Mend SCA, from Mend, provides license risk governance and automated dependency updates. Common uses: License Compliance. Check deployment options and top SCA competitors.
DevSecOps & Software Supply ChainView details