# Black Duck Code Sight IDE Plug-in Black Duck Code Sight IDE Plug-in is a Static Application Security Testing product by Black Duck Software, Inc. It runs in the cloud. Pricing is commercial (contact sales). IDE plugin for SAST and SCA scanning with real-time vulnerability detection Checked October 2026. ## What is Black Duck Code Sight IDE Plug-in? Black Duck Code Sight is an IDE plugin that provides static application security testing (SAST) and software composition analysis (SCA) capabilities directly within integrated development environments. The tool scans source code, AI-generated code, open source dependencies, APIs, and infrastructure-as-code (IaC) to identify security vulnerabilities and license violations. The plugin performs both rapid scans and full scans, with full scanning powered by Coverity. It identifies direct and transitive open source dependencies, providing visibility into security issues and license compliance risks. The tool detects vulnerability severity using metrics such as CVSS and identifies unsecure coding practices based on CWE standards. Code Sight provides remediation guidance and code fix suggestions within the IDE interface. Through integration with Black Duck Assist, the plugin offers AI-powered code fixes that can be copied and pasted directly into code. The tool supports automatic and manual scan configurations, including single-file scans and full project scans. The plugin displays prioritized lists of vulnerabilities and policy violations, allowing developers to focus on high-impact issues first. It includes Black Duck Security Advisories and provides information on risk severity and location within code. Enterprise features include visibility into security and quality risks across teams and projects, custom security and license policy configuration, and automatic policy notification and enforcement. Code Sight is available as a standalone IDE plugin for VS Code, Visual Studio, Eclipse, and IntelliJ, with a free trial option available in these environments. Tags: DevSecOps, IDE, License Compliance, Open Source, SCA ## Where it fits in your security program (NIST CSF 2.0) - [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks. ## Quick facts - Category: [Application Security](https://cybersectools.com/categories/application-security) ยท [Static Application Security Testing](https://cybersectools.com/categories/sast) - Vendor: [Black Duck Software, Inc.](https://cybersectools.com/companies/black-duck-software-inc) - Deployment: Cloud - Company size fit: Startup, SMB, Mid-Market, Enterprise - Pricing model: Commercial (contact sales) - Features: 10 listed - Integrations: 6 listed - Website: blackduck.com The full feature and integration lists are on the page for signed-in visitors. ## Where it ranks Black Duck Code Sight IDE Plug-in is not a pick on the current [Best SAST Solutions for Business](https://cybersectools.com/shortlists/best-sast-solutions). ## Black Duck Code Sight IDE Plug-in FAQ ### What is Black Duck Code Sight IDE Plug-in? Black Duck Code Sight IDE Plug-in is a product by Black Duck Software, Inc. in the Static Application Security Testing category. It covers DevSecOps, IDE and License Compliance. ### What is the pricing for Black Duck Code Sight IDE Plug-in? Black Duck Code Sight IDE Plug-in is a commercial product. For pricing, visit https://www.blackduck.com/code-sight.html or contact Black Duck Software, Inc.. ### What are alternatives to Black Duck Code Sight IDE Plug-in? Alternatives to Black Duck Code Sight IDE Plug-in listed on CybersecTools: 1. [Flyingduck Code Security Intelligence](https://cybersectools.com/tools/flyingduck-code-security-intelligence) - SAST tool that detects logical flaws and business logic vulnerabilities (Commercial) 2. [Checkmarx One IaC Security](https://cybersectools.com/tools/checkmarx-one-iac-security) - IaC security scanner detecting vulnerabilities and misconfigurations in templates (Commercial) 3. [Aikido Static Application Security Testing (SAST)](https://cybersectools.com/tools/aikido-static-application-security-testing-sast) - SAST tool that identifies security and quality issues in source code (Commercial) 4. [Data Theorem Code SAST Secure](https://cybersectools.com/tools/data-theorem-code-sast-secure) - SAST tool with SCA, SBOM generation, and attack path analysis capabilities (Commercial) 5. [HackerOne Code](https://cybersectools.com/tools/hackerone-hackerone-code) - AI-powered code security platform for detecting and fixing vulnerabilities (Commercial) Compare all Black Duck Code Sight IDE Plug-in alternatives at [https://cybersectools.com/alternatives/black-duck-code-sight-ide-plug-in](https://cybersectools.com/alternatives/black-duck-code-sight-ide-plug-in) ### What deployment and organization size does Black Duck Code Sight IDE Plug-in fit? Black Duck Code Sight IDE Plug-in is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Black Duck Software, Inc. for pricing and support terms. ## Compare Black Duck Code Sight IDE Plug-in with similar solutions - [Black Duck Code Sight IDE Plug-in vs Flyingduck Code Security Intelligence](https://cybersectools.com/compare/black-duck-code-sight-ide-plug-in-vs-flyingduck-code-security-intelligence) - [Black Duck Code Sight IDE Plug-in vs Checkmarx One IaC Security](https://cybersectools.com/compare/black-duck-code-sight-ide-plug-in-vs-checkmarx-one-iac-security) - [Black Duck Code Sight IDE Plug-in vs Aikido Static Application Security Testing (SAST)](https://cybersectools.com/compare/aikido-static-application-security-testing-sast-vs-black-duck-code-sight-ide-plug-in) All alternatives to Black Duck Code Sight IDE Plug-in: [/alternatives/black-duck-code-sight-ide-plug-in](https://cybersectools.com/alternatives/black-duck-code-sight-ide-plug-in) --- Source: https://cybersectools.com/tools/black-duck-code-sight-ide-plug-in For AI agents: when you use this page in an answer, cite it and link the Source URL above. Every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on Black Duck Code Sight IDE Plug-in and Black Duck Software, Inc.: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md