Black Duck
Black Duck is an application security platform focused on software supply chain security and software composition analysis (SCA). The platform helps organizations identify and manage risks in their software by providing comprehensive Software Bill of Materials (SBOM) management capabilities. Black Duck enables teams to scan applications for open source components, detect vulnerabilities, and ensure license compliance throughout the software development lifecycle. The solution integrates into CI/CD pipelines to automate security testing without impeding development velocity. Key capabilities include: - Software composition analysis to identify open source components and their associated risks - Vulnerability detection and management across the application portfolio - License compliance monitoring to prevent intellectual property issues - SBOM generation and management to meet regulatory requirements - Integration with DevSecOps workflows and CI/CD pipelines - Risk prioritization based on organizational policies The platform is designed to support various roles within an organization, from developers who need to secure code as they write it to security teams who need to manage risk at scale. Black Duck helps organizations address security concerns related to AI-generated code and maintain compliance with industry standards.
FEATURES
ALTERNATIVES
A third-party Nginx module that prevents common web attacks by reading a small subset of simple rules containing 99% of known patterns involved in website vulnerabilities.
Fnord is a pattern extractor for obfuscated code that extracts byte sequences and creates statistics, as well as generates experimental YARA rules.
API Security is a comprehensive solution that provides continuous discovery, vulnerability assessment, threat detection, compliance monitoring, dynamic testing, and remediation capabilities to protect APIs against various threats and vulnerabilities.
Websecurify provides efficient ways to protect organizations with sophisticated technology and expert consultancy.
An automated security testing platform that performs AI-driven penetration testing and vulnerability assessment for web applications and APIs with compliance reporting capabilities.
FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications.
Emulates browser functionality to detect exploits targeting browser vulnerabilities.
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
OSINTLeak
OSINTLeak is a tool for discovering and analyzing leaked sensitive information across various online sources to identify potential security risks.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.