Black Duck Polaris
- 1Runs onAPI, Web
- 2Costsfree trial
- 3Deployment modelcloud
- 4Container scanningYes
- 5Policy as codeYes
- 6Remediation workflowsYes
- 7SBOM managementYes
- 8Compliance reportingYes
Overview
Black Duck Polaris is a cloud application-security platform that brings several types of testing into software development workflows. Its engines cover static analysis through Polaris fAST Static, software composition analysis through Polaris fAST SCA, and dynamic analysis through Polaris fAST Dynamic. It also scans infrastructure as code and detects secrets. Dashboards, correlated and enriched findings, portfolio analytics, and role-based views help teams organize risk. Polaris can produce software bills of materials using package-manager, signature, binary, and container analysis. It generates compliance reports for PCI DSS, HIPAA, GDPR, SOC 2, and ISO 27001, and maps findings to OWASP Top 10 and CWE. Repository integrations include Azure DevOps, Bitbucket, GitHub, and GitLab. Issue tracking connects with Azure DevOps, Jira Cloud and Data Center, and ServiceNow; Jira and ServiceNow support two-way synchronization. Pricing is on request, and a free trial is available. The service description limits an application to 1 million lines of code and five supporting projects.
Who it is for
Polaris suits software teams seeking combined application-security scanning, compliance reporting, and repository or issue-tracker integrations. It is relevant to teams that need centralized risk views, subject to the stated application and project limits.
What is good
- Combines SAST, SCA, DAST, IaC scanning, and secrets detection.
- Generates SBOMs from four analysis methods.
- Supports two-way synchronization with Jira and ServiceNow.
- Free trial is available.
What to know first
- Pricing is available on request.
- Applications are capped at 1 million lines of code.
- Each subscription application may have up to five supporting projects.
Verdict
Polaris brings multiple scanning methods, reporting, and workflow integrations into a cloud service. Check the application and supporting-project limits against your portfolio before choosing it.
Black Duck Polaris plans and pricing
All plansCompared on DevSecOps platforms
- Deployment model
- cloudblackduck.com
- Container scanning
- Yesblackduck.com
- Policy as code
- Yesblackduck.com
- Remediation workflows
- Yesblackduck.com
- SBOM management
- Yesblackduck.com
- Compliance reporting
- Yesblackduck.com
Facts
- Product type
- Polaris is a cloud-native, software-as-a-service application security testing platform for unifying and automating application security across the software development life cycle.blackduck.com · 1 Oct 2026
- Analysis engines
- The platform integrates SAST with Polaris fAST Static, SCA with Polaris fAST SCA, and DAST with Polaris fAST Dynamic.blackduck.com · 1 Oct 2026
- Additional scanning
- Polaris combines SAST, SCA, and DAST with infrastructure-as-code analysis and secrets detection.blackduck.com · 1 Oct 2026
- Risk management
- Polaris provides unified dashboards, intelligent correlation, contextual enrichment, portfolio-wide analytics, and role-based views for risk prioritization.blackduck.com · 1 Oct 2026
- SBOM
- Polaris can generate software bills of materials using package-manager, signature, binary, and container analysis.polaris.blackduck.com · 1 Oct 2026
- SCM integrations
- Polaris supports repository integrations with Azure DevOps, Bitbucket, GitHub, and GitLab.docs.blackduck.com · 1 Oct 2026
- Issue tracking
- Supported issue-tracking integrations include Azure DevOps, Jira Cloud and Data Center, and ServiceNow, with two-way synchronization available for Jira and ServiceNow.docs.blackduck.com · 1 Oct 2026
- Automation API
- Polaris provides APIs for issue data, triage, test automation, service accounts, and repository integrations.polaris.blackduck.com · 1 Oct 2026
- Security controls
- Black Duck states that customer data is encrypted in transit and at rest, with HTTPS/TLS 1.2 or better and AES-256 or better for persistent data.blackduck.com · 1 Oct 2026
- Compliance certifications
- Black Duck lists SOC 2 Type 2, SOC 3 Type 2, ISO 27001, ISO 27017, ISO 26262, CSA STAR self-assessment, TISAX, and TX-RAMP Level 2 covering Polaris.blackduck.com · 1 Oct 2026
- Support
- The Black Duck Developer Portal offers documentation, a community account, and a contact-support channel for Polaris users.polaris.blackduck.com · 1 Oct 2026
- Subscription limit
- The Polaris service description states that one application may not exceed 1 million lines of code and that a subscription application may have up to five supporting projects.blackduck.com · 1 Oct 2026
Company
- Headquarters
- Burlington, Massachusetts, United Statesblackduck.com · 28 Sept 2026
Best Black Duck Polaris alternatives
See all 20
Where it ranks on Specifiction
Is Black Duck Polaris yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- blackduck.com/platform.html· checked 1 Oct 2026
- polaris.blackduck.com/developer/default/polaris-documentation· checked 1 Oct 2026
- docs.blackduck.com/r/polaris/black-duck-polaris-platform/c· checked 1 Oct 2026
- docs.blackduck.com/r/polaris/black-duck-polaris-platform/o· checked 1 Oct 2026
- polaris.blackduck.com/developer/default/· checked 1 Oct 2026
- blackduck.com/company/legal/security-commitments.html· checked 1 Oct 2026
- blackduck.com/content/dam/black-duck/en-us/legal/saas· checked 1 Oct 2026
- blackduck.com/solutions/devsecops.html· checked 28 Sept 2026
- blackduck.com/platform/get-pricing.html· checked 1 Oct 2026