Black Duck: cybersecurity software

Black Duck SCA is the oldest in the space, and provides a product that technically checks all of the SCA boxes, but is not nearly as user friendly as other tools. They get the job done, but UI is targeted more at security than developers.

What Black Duck is

Black Duck SCA is the oldest in the space, and provides a product that technically checks all of the SCA boxes, but is not nearly as user friendly as other tools. They get the job done, but UI is targeted more at security than developers. The vendor site is www.blackduck.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Black Duck covers

Black Duck is in the catalog for these capabilities. Categories: SCA. Catalog tags: Nerdy.

How to evaluate Black Duck in a security program

Use Black Duck as a stack candidate, not as diligence evidence. The oneNorma score for Black Duck is 2.5/10 (percentile 1). If the real gap is in SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.blackduck.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

SCA

Tags

Nerdy

Frequently asked questions

What is Black Duck?

Black Duck SCA is the oldest in the space, and provides a product that technically checks all of the SCA boxes, but is not nearly as user friendly as other tools. They get the job done, but UI is targeted more at security than developers. Site: www.blackduck.com.

Which categories does Black Duck fall into?

Black Duck appears in the oneNorma directory under SCA. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Black Duck?

No. The Black Duck profile (www.blackduck.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.