Black Duck
Black Duck provides application security testing tools for software development.
- Categories
- Application security testing, Automotive cybersecurity, Software supply chain and SBOM, API security, Secrets management
- Based in
- Burlington, Massachusetts, United States
- Founded
- 2002
- Ownership
- Owned by Francisco Partners and Clearlake Capital since 2024
About Black Duck
Black Duck sells application security testing tools and services. It provides static analysis, software composition analysis, dynamic analysis, interactive analysis, fuzz testing, and AI-powered application security. Its platform, Black Duck Polaris, combines these engines with infrastructure as code analysis and secrets detection in a single SaaS product. The company also offers Black Duck Signal for agentic AppSec and Coverity for static analysis. It serves security, development, and legal teams. Customers include over 4,000 organisations, from startups to Fortune 100 companies. It targets industries such as financial services, automotive, medical devices, public sector, and embedded software. The company says its tools integrate into developer workflows and CI/CD pipelines. It uses over 20 years of human-verified security intelligence, called ContextAI, to prioritise risks and reduce false positives. It also provides customer success services, including technical support, onboarding, and program strategy.
Products
- Black Duck Polaris PlatformA SaaS platform that unifies SAST, SCA, DAST, IaC analysis, and secrets detection for application security.
- Black Duck SignalAn agentic AppSec tool that uses AI to reduce noise and hallucinations in security findings.
- Coverity Static AnalysisA static analysis tool that helps developers find and fix code security and quality issues.
- Black Duck SCAA software composition analysis tool that manages open source and third-party code risks.
- Black Duck AssistAn AI tool that provides real-time issue summaries and code analysis in the IDE.
- Black Duck KnowledgeBaseA vulnerability database that provides intelligence on open source components.
Ownership and deals
Companies owned by Francisco Partners lists all 7 in the directory, with the deals on record.
Companies owned by Clearlake Capital lists both in the directory.
- UltraViolet Cyber acquired Black DuckReport on UltraViolet Cyber buying Black Duck (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.