Black Duck

Polaris One Platform. Complete Application Security.

Black Duck is an application security testing platform that helps organizations detect vulnerabilities in proprietary code, open source and third-party components, and AI-generated code, while managing license compliance and software supply chain risk. It supports SAST, SCA, DAST, IAST, and AI-powered AppSec across the software development lifecycle, with integrations into CI/CD pipelines and developer workflows.

The Polaris Platform is a cloud-native SaaS solution combining fAST Static (SAST), fAST SCA, fAST Dynamic (DAST), IaC analysis, and secrets detection. It offers AI features including Black Duck Assist for IDE-based issue summaries and code analysis, AI-driven triage with confidence ratings, and AI-generated fix pull requests. Additional products include Coverity Static Analysis for on-premises use, CodeSight IDE Plug-in, Black Duck SCA, Continuous Dynamic, and Seeker Interactive Analysis. Polaris integrates with GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Azure Boards, GitHub Issues, GitLab Issues, and ServiceNow, and supports SBOM generation and policy-driven gates.

Black Duck is intended for development, DevOps, and security teams, including those in regulated industries and safety-critical systems. Deployment options include cloud-native SaaS, on-premises, and hybrid models. Pricing details are available through contact with sales.

12 alternatives to Black Duck

Ranked by how well each tool replaces Black Duck: shared features, audience, price and popularity.

Parasoft
Intelligent automated testing covering every SDLC stage.
Covers 12 of 15 key features.
IntegrationsReportingAnalyticsAI assistant
63 out of 100 matchContact sales
Meterian
Open source vulnerability scanner and software composition analysis for secure software
Covers 13 of 15 key features and has a free plan.
Free planIntegrationsReportingAutomationsNotifications
62 out of 100 matchContact sales
Testlio
Crowdsourced software testing orchestrated by an AI platform (LeoCore) and a managedglobal
Covers 11 of 15 key features.
AI assistantIntegrationsReportingAutomations
60 out of 100 matchContact sales
Applause
Managed software testing with a global community, AI, and automation
Covers 8 of 15 key features.
IntegrationsApi accessAI assistantAutomations
59 out of 100 matchContact sales
BlazeMeter
Unify performance testing, API testing and monitoring, service virtualization, AI-powered,
Covers 12 of 15 key features and has a free plan.
Free planAI assistantIntegrationsReportingAutomations
59 out of 100 match$8.25/mo
Katalon
The AI platform for software quality
Covers 9 of 15 key features and has a free plan.
Free planAI assistantAutomationsIntegrationsReporting
59 out of 100 match$84/mo
DeepSource
The AI Code Review Platform
Covers 10 of 15 key features and has a free plan.
Free planAI assistantWebhooksAutomationsNotifications
58 out of 100 match$24/mo
Sauce Labs
Cloud test automation and release assurance with agentic AI
Covers 5 of 15 key features.
AnalyticsApi accessAutomationsIntegrations
58 out of 100 match$249/mo
Trackingplan
Your digital analytics agent for performance and martech.
Covers 7 of 15 key features.
AnalyticsReportingAutomationsAI assistant
58 out of 100 match$249/mo
StackHawk
Your AI agent ships code. StackHawk ships it secure.
Covers 7 of 15 key features.
Api accessAutomationsReportingDashboards
58 out of 100 match$10/mo
testRigor
Test automation tool that lets users write end-to-end tests in plain English, with generAI
Covers 12 of 15 key features and has a free plan.
Free planAI assistantAutomationsApi accessReporting
57 out of 100 matchContact sales
BrowserStack
Cross-browser and app testing platform on real browsers and devices
Covers 5 of 15 key features and has a free plan.
Free planAutomationsIntegrationsReportingAnalytics
57 out of 100 match$150/mo