Black Duck Seeker
blackduck.com
What it is
Black Duck Seeker is paid, self-hosted interactive application security testing software for web runtime targets. It tests APIs and can connect security checks to CI/CD pipelines. Instrumentation uses an agent, and listed language coverage includes Java, .NET, Node.js, Go, Python, and PHP. The software is listed for Linux, macOS, web, and Windows environments, while deployment remains self-hosted. This combination supports teams assessing web applications and APIs built with the covered languages as part of automated delivery workflows. Pricing is available on request rather than published as an amount. Black Duck lists its headquarters in Burlington, Massachusetts, United States. Organizations choosing Seeker need to account for its self-hosted model, agent instrumentation, supported runtime, and language list when matching it to their applications and infrastructure.
Spec sheet
- Headquarters
- Burlington, Massachusetts, United StatesRead 23 Sep 2026 · blackduck.com
Strong points and limits
Strong points
- API testing is supported
- Integrates with CI/CD pipelines
- Covers six listed languages
- Runs on Linux, macOS, web, and Windows
- Uses agent instrumentation
Limits
- Deployment is self-hosted
- Pricing is available only on request
- Coverage is limited to listed languages
Who it suits
It suits software teams securing web applications and APIs in Java, .NET, Node.js, Go, Python, or PHP. It is also intended for teams that want CI/CD-connected checks and can operate a self-hosted deployment.
Verdict
Black Duck Seeker combines web-focused API testing, agent instrumentation, and CI/CD integration in a self-hosted package. Its fit depends on your deployment capacity and whether your applications use the listed languages.