Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Black Duck, a segment of the Synopsys Software Integrity Group, stands out as a prominent provider of application security testing (AST) solutions. Their extensive array of offerings encompasses tools for static analysis, software composition analysis (SCA), dynamic analysis, and interactive analysis, which assist organizations in detecting and addressing security vulnerabilities throughout the software development life cycle. By streamlining the identification and management of open-source software, Black Duck guarantees adherence to security and licensing regulations. Their solutions are meticulously crafted to enable organizations to foster trust in their software while effectively managing application security, quality, and compliance risks at a pace that aligns with business demands. With Black Duck, businesses are equipped to innovate with security in mind, delivering software solutions confidently and efficiently. Furthermore, their commitment to continuous improvement ensures that clients remain ahead of emerging security challenges in a rapidly evolving technological landscape.

Description

Fuzzing serves as an effective method for identifying software bugs. Essentially, it involves generating numerous randomly crafted inputs for the software to process in order to observe the outcomes. When a program crashes, it usually indicates that there is a problem. Despite being a widely recognized approach, it is often surprisingly straightforward to uncover bugs, including those with potential security risks, in commonly used software. Memory access errors, especially prevalent in programs developed in C/C++, tend to be the most frequently identified issues during fuzzing. While the specifics may vary, the underlying problem is typically that the software accesses incorrect memory locations. Modern Linux or BSD systems come equipped with a variety of fundamental tools designed for file display and parsing; however, most of these tools are ill-equipped to handle untrusted inputs in their present forms. Conversely, we now possess advanced tools that empower developers to detect and investigate these vulnerabilities more effectively. These innovations not only enhance security but also contribute to the overall stability of software systems.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

C Yes 
C++ Yes 
Apache Maven Yes 
Black Duck Mobile Application Security Testing Yes 
BlueFlag Security Yes 
C# Yes 
Coverity Static Analysis Yes 
Digital.ai Release Yes 
Gradle Yes 
Jira Service Management Yes 
Logilica Yes 
Longbow Yes 
Maverix Yes 
NorthStar Navigator Yes 
Phoenix Security Yes 
Rezilion Yes 
ThreadFix Yes 
Tromzo Yes 
Vulcan Cyber Yes 

Integrations

C Yes 
C++ Yes 
Apache Maven No 
Black Duck Mobile Application Security Testing No 
BlueFlag Security No 
C# No 
Coverity Static Analysis No 
Digital.ai Release No 
Gradle No 
Jira Service Management No 
Logilica No 
Longbow No 
Maverix No 
NorthStar Navigator No 
Phoenix Security No 
Rezilion No 
ThreadFix No 
Tromzo No 
Vulcan Cyber No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Black Duck

Founded

2002

Country

United States

Website

www.blackduck.com

Vendor Details

Company Name

Fuzzing Project

Website

fuzzing-project.org

Product Features

IT Asset Management

Asset Tracking Yes 
Audit Management Yes 
Compliance Management Yes 
Configuration Management No 
Contract/License Management Yes 
Cost Tracking No 
Depreciation Management No 
IT Service Management No 
Inventory Management Yes 
Maintenance Management No 
Procurement Management No 
Requisition Management No 
Supplier Management Yes 

License Management

Automatic SKU Recognition No 
Central LM Server No 
Copy Protection No 
History Tracking Yes 
Node Management No 
Online Activation Yes 
Portable License No 
Sarbanes-Oxley Compliance Yes 
Timing Rights No 
Trial License Yes 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Product Features

Alternatives

Revenera SCA Reviews

Revenera SCA

Revenera

Alternatives

go-fuzz Reviews

go-fuzz

dvyukov
ClusterFuzz Reviews

ClusterFuzz

Google