Black Duck

Black Duck is an application security and software supply chain security company headquartered in Burlington, Massachusetts. The company provides technologies that help organizations identify vulnerabilities, license risks and quality issues across proprietary and open-source software. Its portfolio includes Software Composition Analysis, static and dynamic application security testing, interactive analysis, fuzz testing, binary analysis and software risk management. Black Duck SCA helps development and security teams discover open-source components, generate and manage SBOMs, identify vulnerabilities and license conflicts, and monitor dependencies for emerging risk. Its broader Polaris platform brings multiple application security capabilities together for centralized risk management and remediation. Black Duck has also expanded into security for AI-generated code and open-source AI models as organizations adopt AI-assisted software development. The company supports DevSecOps programs by integrating security testing into source control, CI/CD pipelines, IDEs and development workflows. Black Duck serves enterprises across financial services, healthcare, government, automotive, technology and other industries where software integrity is critical. Its technology is designed to provide visibility across dependencies, source code, binaries and software artifacts. The company continues to emphasize software supply chain security, SBOM management and compliance with standards such as NIST SSDF and emerging regulations.