What is the pricing for Black Duck Code Sight IDE Plug-in?

Black Duck Code Sight IDE Plug-in is a commercial product. For pricing, visit https://www.blackduck.com/code-sight.html or contact Black Duck Software, Inc..

What are alternatives to Black Duck Code Sight IDE Plug-in?

Alternatives to Black Duck Code Sight IDE Plug-in listed on CybersecTools: 1. Flyingduck Code Security Intelligence - SAST tool that detects logical flaws and business logic vulnerabilities (Commercial) 2. Checkmarx One IaC Security - IaC security scanner detecting vulnerabilities and misconfigurations in templates (Commercial) 3. Aikido Static Application Security Testing (SAST) - SAST tool that identifies security and quality issues in source code (Commercial) 4. Data Theorem Code SAST Secure - SAST tool with SCA, SBOM generation, and attack path analysis capabilities (Commercial) 5. HackerOne Code - AI-powered code security platform for detecting and fixing vulnerabilities (Commercial) Compare all Black Duck Code Sight IDE Plug-in alternatives at https://cybersectools.com/alternatives/black-duck-code-sight-ide-plug-in

What deployment and organization size does Black Duck Code Sight IDE Plug-in fit?

Black Duck Code Sight IDE Plug-in is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Black Duck Software, Inc. for pricing and support terms.

Black Duck Code Sight IDE Plug-in

Name: Black Duck Code Sight IDE Plug-in
Author: Black Duck Software, Inc.

byBlack Duck Software, Inc.

IDE plugin for SAST and SCA scanning with real-time vulnerability detection

Application Security Static Application Security TestingCloudStartup · SMB · Mid-Market · EnterpriseCommercial

Visit website

What is Black Duck Code Sight IDE Plug-in?

Black Duck Code Sight is an IDE plugin that provides static application security testing (SAST) and software composition analysis (SCA) capabilities directly within integrated development environments. The tool scans source code, AI-generated code, open source dependencies, APIs, and infrastructure-as-code (IaC) to identify security vulnerabilities and license violations.

The plugin performs both rapid scans and full scans, with full scanning powered by Coverity. It identifies direct and transitive open source dependencies, providing visibility into security issues and license compliance risks. The tool detects vulnerability severity using metrics such as CVSS and identifies unsecure coding practices based on CWE standards.

Code Sight provides remediation guidance and code fix suggestions within the IDE interface. Through integration with Black Duck Assist, the plugin offers AI-powered code fixes that can be copied and pasted directly into code. The tool supports automatic and manual scan configurations, including single-file scans and full project scans.

The plugin displays prioritized lists of vulnerabilities and policy violations, allowing developers to focus on high-impact issues first. It includes Black Duck Security Advisories and provides information on risk severity and location within code. Enterprise features include visibility into security and quality risks across teams and projects, custom security and license policy configuration, and automatic policy notification and enforcement.

Code Sight is available as a standalone IDE plugin for VS Code, Visual Studio, Eclipse, and IntelliJ, with a free trial option available in these environments.