Was ist Black Duck?

Black Duck is a comprehensive solution for managing security, license compliance, and code quality risks that come from the use of open source in applications and containers. Named a leader in software composition analysis (SCA) by Forrester, Black Duck gives you unmatched visibility into third-party code, enabling you to control it across your software supply chain and prioritize your remediation activities.

Wer verwendet Black Duck?

Software development and security teams, ranging from small businesses to enterprise customers.

Wo kann Black Duck bereitgestellt werden?

Cloud, SaaS, webbasiert, Mac (Desktop), Windows (Desktop), Linux (Desktop), Windows (On-Premise), Linux (On-Premise)

Über den Anbieter

  • Synopsys
  • Telefon-Support
  • 24/7 Live-Support

Erhältlich in diesen Ländern

Australien, Belgien, China, Deutschland, Dänemark und 23 weitere

Sprachen

Chinesisch, Englisch, Japanisch

Über den Anbieter

  • Synopsys
  • Telefon-Support
  • 24/7 Live-Support

Erhältlich in diesen Ländern

Australien, Belgien, China, Deutschland, Dänemark und 23 weitere

Sprachen

Chinesisch, Englisch, Japanisch

Black Duck – Videos und Bilder

Black Duck Software - 1
2 weitere anzeigen
Videos zu Black Duck
Black Duck Software - 1

Kosten ähnlicher Produkte wie Black Duck vergleichen

Black Duck

N/A
Kostenlose Version
Gratis Testen
Nicht verfügbar
Kostenlose Version
Gratis Testen
N/A
Kostenlose Version
Gratis Testen
5,00 $/Jahr
Kostenlose Version
Gratis Testen

Black Duck Funktionen

  • Benutzer-Management
  • Berichterstattung / Analyse
  • Compliance Management
  • Compliance-Verfolgung
  • Lizenz-Nachverfolgung
  • Lizenzbestand
  • Richtlinien Managemen-
  • Schwachstellen-Scannen
  • Wirtschaftsprüfung-Management

Alternativen für Black Duck

It is a SIEM solution that helps businesses manage incidents, detect anomalies, generate reports, and more.
The FortMesa platform provides cybersecurity programs & orchestration for organizations without an in house security team.
Laut Hersteller die sicherste Cybersicherheitssoftware für Unternehmen.
DNS-basierte Web-Inhaltsfilter blockiert Malware, Ransomware und Phishing Versuche und stellt Webinhaltskontrolle bereit Erfahre mehr über WebTitan
Mit der Audit-Management-Software von Onspring hast du die Kontrolle über deinen gesamten IA-Prozess. Sie ist nutzerfreundlich, einfach einzurichten und vollständig konfigurierbar.
LogPoint ist eine effektive und wertvolle SIEM-Lösung für Unternehmen aller Größen wegen ihres einzigartigen Designs und der reichhaltigen Funktionen. Erfahre mehr über LogPoint
Pulseway ist eine preisgekrönte IT-Management-Plattform, die dir die vollständige Kontrolle über die komplette IT gibt. Erfahre mehr über Pulseway
HaloITSM vereint alles, was du für den IT-Support benötigst, in einer zentralen Lösung. Erfahre mehr über HaloITSM
Automatisierte, Proximity-basierte Zwei-Faktor-Authentifizierung auf Computern und Websites. Passwortlose Anmeldung und automatisches Sperren von PCs, Macs und Websites. Erfahre mehr über GateKeeper Enterprise
Lösung für Echtzeitprotokolle und Ereignisprotokollüberwachung mit System-, Hardware-/ Softwareinventar- und Netzwerküberwachungsfunktionen. Erfahre mehr über EventSentry
Blumira makes security easy and effective for SMBs and mid-market companies, helping them detect and respond to cybersecurity threats.
BeyondDLP ermöglicht ein sicheres Datenerlebnis Eine einzigartige und proaktive Lösung zur Verhinderung von Datenverlusten und -lecks zum Schutz deiner Daten – überall.
Bietet die wirtschaftlichste Sicherheitsinformations- und Event-Management-(SIEM)-Software auf dem Markt. Erfahre mehr über ManageEngine EventLog Analyzer

Bewertungen über Black Duck

Durchschnittliche Bewertung

Gesamt
4,2
Benutzerfreundlichkeit
3,7
Kundenservice
4,1
Funktionen
4,0
Preis-Leistungs-Verhältnis
3,8

Nutzerbewertungen nach Unternehmensgröße (Angestellte)

  • <50
  • 51-200
  • 201-1.000
  • >1.001

Bewertungen nach Punktzahl finden

5
41%
4
41%
3
14%
2
3%
Sharique
Sharique
DevOps Engineering Manager in Indien
Verifizierter Nutzer auf LinkedIn
Krankenhausversorgung & Gesundheitswesen, 5.001-10.000 Mitarbeiter
Verwendete die Software für: Mehr als 1 Jahr
Herkunft der Bewertung

Black Duck - The goto tool for Software Composition Analysis

5,0 vor 12 Monaten

Kommentare: Excellent experience starting from the concept phase, evaluation phase and then later the complete implementation. Its a great tool in the domain of security and a must have

Vorteile:

An updated vulnerability list and ease of Maintainance and administration are the key features of the tool. Moreover, its a breeze to integrate with various CI/CD toolsets ensuring a great DevSecOps practice

Nachteile:

I guess in general DevSecOps is still a recent phenomenon and developers and engineers need to get themselves well acquainted with such security concepts

rajiv
senior specialist cloud architect in Indien
Verwendete die Software für: 6-12 Monate
Herkunft der Bewertung

The ease of identifying and managing the open source code vulnerabilities and license risks.

5,0 vor 5 Jahren

Kommentare: Ease in identifying the security exposures and hidden vulnerabilities created by open source components.
Time to market is faster for identifying the vulnerabilities early during the development stage.
open source license management becomes so easy now.

Vorteile:

The ease of identifying and managing the open source code and as well examining the source code for vulnerabilities and specifically the hidden security vulnerabilities is amazing. This is the product that every organization should look out to manage the source code for identifying quickly about vulnerabilities, open source code license management which can be lethal if ignored. Easily integrates with your current CI engines and sets the pace for your time to market. Ease in identifying the security exposures and hidden vulnerabilities created by open source components. Time to market is faster for identifying the vulnerabilities early during the development stage. open source license management becomes so easy now. The product is really amazing already. Hub knowledge bases are huge and growing day by day.

Nachteile:

Improve in reporting, and better API experience. Black Duck is a duckling and is growing fast.Suggest black duck to update the KBs quickly.

Pete
Infrastructure & Security Manager in Belgien
Bankwesen, 1.001-5.000 Mitarbeiter
Verwendete die Software für: 6-12 Monate
Herkunft der Bewertung

Great software which I believe in, but not a pain free experience.

3,0 vor 5 Jahren

Kommentare: Ability to detect open source vulnerabilities in our code.

Vorteile:

Ability to detect open source vulnerabilities in our code. Pre-sales contact & support was good (demo, trial etc). Clean interface. Performance improved in v4.0.0.

Nachteile:

Difficult installation process, made more complicated with the introduction of Docker in v4.0.0 & with introduction of mandatory SSL/TLS web server certificate which requires troubleshooting trust issues. Support team are reluctant to pick up the phone or enter into telephone support, with sporadic email communication being the favoured option. Some gaps in documentation. Why is there no pre-built Black Duck Hub virtual appliance that I can drop into VMware? No documentation for implementing with vSphere Integrated Containers (VIC), only documentation for Docker & Openshift. Reporting improvements still to be made.

Antwort von Black Duck

vor 5 Jahren

Thank you for providing feedback about your experience with Black Duck Hub. We¿re so sorry you are having issues ¿ and we¿d like to work together to fix that. We have escalated your case so that we can resolve it quickly. Our customer support team strives to provide support in the way that works best for you, so we noted in your account that you prefer to be reached via phone. A senior support representative will reach out to you via phone. Many of the issues you experienced during deployment were due to our old AppMgr architecture. The new Docker deployment is a more stable environment built to fix many of the issues you experienced. The Docker deployment can be harder to implement and run the first time; our senior support representative will be guiding you through this process. We will do better next time you have an issue; please escalate any issues you have to your Customer Success Manager.

Marco
System Analyst in Italien
Computer-Software, 1.001-5.000 Mitarbeiter
Verwendete die Software für: 1-5 Monate
Herkunft der Bewertung

Using Black Duck HUB for Open Source Governance in software projects.

5,0 vor 5 Jahren

Kommentare: We are working in improving Open Source Culture in our Company and Customers: Black Duck HUB is a very good tool for awareness about legal, security and operational risks in using Open Source Components.

Vorteile:

We are working in improving Open Source Culture in our Company and Customers: Black Duck HUB is a very good tool for awareness about legal, security and operational risks in using Open Source Components. A very good thing is that it provide features for code scanning, independently from language and technology, also integrated with CI/CD tools like Jenkins. The GUI is very easy to use and intuitive, the dashboard give a lot of information about Open Source Components in the project and you can take advantage of notification about new vulnerability. In the latest versions Back Duck Hub is also improved in remediation suggestions about vulnerability. Black Duck provide also good reports and you can customize it using restful API and direct access to a Report Database. What is more it is really easy to install, we use the docker compose version: just install Docker, download images and run a command to set up the environment or upgrade to a new version! Last but not least the technical support and customer care is really good.

Nachteile:

Black Duck HUB is a quite new product, despite it has very famous and consolidate ancestors like Protex. So some features can improve and better meet users needs, especially about reports and API. Also documentation can improve .

Ramani
Business Analyst in USA
Verwendete die Software für: Mehr als 1 Jahr
Herkunft der Bewertung

So far my experience with BlackDuck is great. I have seen almost positive response pretty much

4,0 vor 5 Jahren

Vorteile:

I like BD Hub when compare to Protex and CodeCenter. It's easy to handle and all in place rather than 2 legs at 2 different places. I have seen little issue with GUI provided along with Hub bit it's managable. The integration with Hub was easy along with Jenkins, Coverity, Jira and other tools. If properly integrated BD Hub along with Jenkins then the issue can be identified with Opertaional/Vulnerability/License much earlier than later. The Hub version of current one in-terms installation looks easy as one bundle instead of few different add-ons as prior. I had little issues while installation since of pre required suff with Linux lsb since it had multiple dependencies, otherwise it was easy to breeze through. Overall, my experience is good so far.

Nachteile:

I have only exposures to 3 BD softwares Protex, CodeCenter and Hub. Out of it, I like Protex as least one. Since it was NOT very much user friendly. It's my experience but could have been better.

Antwort von Black Duck

vor 5 Jahren

Thank you for sharing your feedback. We agree with you - the integrations for Hub make identifying open source risks earlier in the SDLC much simpler. Please reach out to support if you have any questions.