BlackDuck provides robust REST API and CLI capabilities for seamless integration and automation with other tools. It helps in automating DevSecOps effectively by automating policy enforcement for projects, pull request decoration with Rapid scan feature and reporting capability with Reporting Database and SBOM report.

Black Duck performs very poorly outside of a very narrow set of expected use cases. When used with C++ (via Bazel or other build systems) it did not identify components correctly, missed many, and many false alarms. I no longer use the product. Also, the integration tooling is very poor and doesn't even support some of our major platforms (e.g. arm64 macOS).