Black Duck Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines the application security testing (AST) market as consisting of providers of products that enable organizations to assess applications for the presence and management of risk. These products identify risk by evaluating source code, performing runtime tests and inspecting supply chain components. AST products can be integrated throughout development workflows for continuous assessment or be used to perform ad hoc evaluations. They enable organizations to manage application risks by providing an integrated set of capabilities for risk identification, prioritization and triage, policy evaluation and enforcement, and remediation assistance. Market offerings are available in on-premises, SaaS and hybrid delivery models. Organizations leverage AST products to assess applications for the presence of security vulnerabilities and other risks (e.g., legal and operational) throughout their life cycle. These assessments are used to measure and manage the risks within individual applications, application components or groups of applications in the context of their business criticality and other key attributes (e.g., environment, sensitive data handling, etc.). AST products further enable organizations to evaluate software for compliance with internal policies as well as regulatory requirements established by governments or authoritative industry groups.

Active

Find the top Application Security Testing Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Application Security Testing

Seeker Interactive Application Security Testing

Coverity Static Application Security Testing

Black Duck Software Composition Analysis

Continuous Dynamic

WhiteHat Scout (Legacy)

Software Risk Manager

Polaris

Black Duck

Director

Very happy with our ability to quickly see if we are impacted by any open source/third party library issues as well as our license management visibility. 

<50M USD

1B - 3B USD

500M - 1B USD

50M - 250M USD

3B - 10B USD

10B - 30B USD

30B + USD

250M - 500M USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Gov't/PS/ED 50,000 + Employees

Software Developer

Black Duck performs very poorly outside of a very narrow set of expected use cases. When used with C++ (via Bazel or other build systems) it did not identify components correctly, missed many, and many false alarms. I no longer use the product. Also, the integration tooling is very poor and doesn't even support some of our major platforms (e.g. arm64 macOS).

Blackduck has been a great product overall for everything related to OSS scanning and vulnerability checks for all of our projects scanning, it provides good insights on packages and dependencies. The integration with our CI/CD has been very smooth and adds significant value to our work.

Veracode

Checkmarx

Rapid7

Qualys

Other...

OpenText (Micro Focus)

GitLab

Invicti

GitHub

Contrast Security

JFrog

LevelBlue

PortSwigger

SonarSource

Snyk

NTT Application Security

Netsparker--

The Open Web Application Security Project (OWASP)

HCLTech

Hewlett Packard Enterprise (HPE)

Mend.io

Sonatype

CAST

Symantec (Appthority)

Synopsys (Cigital)

AdaCore

Tenable

Black Duck builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Black Duck solutions help developers to secure code as fast as they write it, development and DevSecOps teams to automate testing within development pipelines without compromising velocity, and security teams to proactively manage risk and focus remediation efforts on what matters most. With Black Duck, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle. 

Smart, Secure Everything‚ÄîFrom Silicon to Software
Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything‚Äïwhere devices are getting smarter, everything‚Äôs connected, and everything must be secure.

Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at the forefront of Smart, Secure Everything with the world‚Äôs most advanced tools for silicon chip design, verification, IP integration, and application security testing. Our technology helps customers innovate from Silicon to Software, so they can deliver Smart, Secure Everything.

Since 1986, Synopsys has been at the heart of accelerating electronics innovation with engineers around the world having used Synopsys technology to successfully design and create billions of chips and systems that are found in the electronics that people rely on every day.

Synopsys

Synopsys builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Synopsys solutions help developers to secure code as fast as they write it; development and DevSecOps teams to automate testing within development pipelines without compromising velocity; and security teams to proactively manage risk and focus remediation efforts on what matters most. With Synopsys, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle. 

Reviews

Ratings Overview

Overall experience with

Favorable Review

CI/CD Integration Enables Streamlined Vulnerability Checks and Compliance Management

Critical Review

Limited Accuracy for C++ Scanning and Integration Issues Identified With Black Duck

Likes and dislikes about

likes

dislikes