Skip to content
SPECIFICTION
Get listed

Black Duck SCA

blackduck.com

WebWindowsmacOSLinuxAPISelf-hosted
Visit blackduck.com
Spec score 7.8 #30 of 65 in Software Composition Analysis Software

Spec sheet

Purpose
Black Duck SCA helps teams manage security, quality, and license compliance risks in open source and third-party code.Read 9 Oct 2026 · blackduck.com
Deployment
Black Duck SCA is available as hosted or on-premises software, including options for air-gapped environments.Read 9 Oct 2026 · blackduck.com
Integrations
Black Duck lists integrations across IDEs, source control, CI/build tools, package managers, workflow tools, and production capabilities, and says it offers REST APIs.Read 9 Oct 2026 · blackduck.com
Headquarters
Burlington, Massachusetts, United StatesRead 28 Sep 2026 · blackduck.com
AI model insight
The enterprise feature list includes detection of AI/ML models in projects and evaluation of model origin, usage, and model card.Read 9 Oct 2026 · blackduck.com
Container scanning
Black Duck says it scans Docker and other containers and monitors existing applications and containers for newly disclosed vulnerabilities.Read 9 Oct 2026 · blackduck.com
Detection
It combines dependency, binary, and snippet analysis to identify components and build an SBOM.Read 9 Oct 2026 · blackduck.com
Implementation
The listed plan features include implementation and adoption services, and continuous application monitoring before and after deployment.Read 9 Oct 2026 · blackduck.com
Language support
The product page says it supports common package managers and languages, while signature scanning is language-agnostic; it directs buyers to contact Black Duck for the current supported list.Read 9 Oct 2026 · blackduck.com
License compliance
Features include open source license identification, notices reports, and, in the enterprise feature list, full license text and obligation tracking.Read 9 Oct 2026 · blackduck.com
Price availability
The product page directs prospective customers to Get pricing and displays no plan price.Read 9 Oct 2026 · blackduck.com
SBOM formats
Black Duck SCA supports SBOM import and export in SPDX and CycloneDX formats.Read 9 Oct 2026 · blackduck.com
Supported tools
Examples on the integrations page include GitHub, GitLab, Jenkins, Maven, npm, Artifactory, and Jira Software.Read 9 Oct 2026 · blackduck.com
Vulnerability handling
It provides Black Duck Security Advisories, prioritization and reachability metrics, remediation guidance, and malicious package detection.Read 9 Oct 2026 · blackduck.com

Plans and prices

Open source detection (enterprise edition) Priced on request Unlimited application and container scans · binary and firmware analysis · AI/ML model risk insight · SBOM import/export · automatic policy enforcement Read 9 Oct 2026 · blackduck.com
Standard Edition Priced on request Unlimited application and container scans · SBOM import/export · vulnerability management · license compliance · custom policies Read 9 Oct 2026 · blackduck.com

Every Black Duck SCA plan and price →

Where Specifiction places it

Alternatives to Black Duck SCAAll alternatives →