Black Duck Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines API protection products as a category of specialized stand-alone security products focusing on protecting APIs from exploits, abuse and access violations, and assisting in remediating API exposures. These products offer features such as API discovery, API security testing, API posture management and runtime protection utilizing behavioral analysis. They should provide coverage for the internal- and external-facing APIs, and third-party APIs that organizations may consume. API protection products are delivered as cloud-based and on-premises solutions. Deployment can be offered in-line by intercepting ingress/egress API calls or out-of-band by deploying agents on application workloads and/or scanning code repositories.

Active

Find the top API Protection with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

API Protection

Synopsys API Scanner (Legacy)

Black Duck

DATA SCIENTIST

The Synopsys API scanner has several platform support which helps us to find the threats in terms of security. Best feature it has that the platform can very easily scan through the GIT repository and it shows the detailed metrics and all the results. User interface is very good. It also helps in identifying the security defects on the application programming interfaces along with potential endpoints.

30B + USD

250M - 500M USD

<50M USD

1B - 3B USD

3B - 10B USD

Gov't/PS/ED <5,000 Employees

50M - 250M USD

500M - 1B USD

IT Operations Director

My organization use the tool to scan the APIs for any risk or vulnerability in order to understand our posture capabilities way before the initial deployment. It allows us to replay  the requests that exploit the vulnerabilities

Quality Engineer

Works well with GraphQL and Restful API's. SOAP API's doesn't work. Very good tool to use for Pen Testing phase. Authorization and Authentication vulnerability checks at DB level are straight-forward.  Reporting and analysis is comprehensive.

Google

APISec

Thales Group (Imperva)

Data Theorem

42Crunch

Other...

Wallarm

Cequence Security

Reblaze

TeejLab

Black Duck builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Black Duck solutions help developers to secure code as fast as they write it, development and DevSecOps teams to automate testing within development pipelines without compromising velocity, and security teams to proactively manage risk and focus remediation efforts on what matters most. With Black Duck, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle. 

Smart, Secure Everything‚ÄîFrom Silicon to Software
Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything‚Äïwhere devices are getting smarter, everything‚Äôs connected, and everything must be secure.

Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at the forefront of Smart, Secure Everything with the world‚Äôs most advanced tools for silicon chip design, verification, IP integration, and application security testing. Our technology helps customers innovate from Silicon to Software, so they can deliver Smart, Secure Everything.

Since 1986, Synopsys has been at the heart of accelerating electronics innovation with engineers around the world having used Synopsys technology to successfully design and create billions of chips and systems that are found in the electronics that people rely on every day.

Synopsys

Synopsys builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Synopsys solutions help developers to secure code as fast as they write it; development and DevSecOps teams to automate testing within development pipelines without compromising velocity; and security teams to proactively manage risk and focus remediation efforts on what matters most. With Synopsys, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle. 

Reviews

Ratings Overview

Overall experience with

Favorable Review

Great tool for API threat/vulnerability sec testing, works well for REST and GraphQL API

Critical Review

Seamless integration into our development process, helping us produce faster secure code

Likes and dislikes about

likes

dislikes