Black Duck Software, Inc.
Black Duck provides an application security platform combining SCA, SAST, DAST and AI-powered testing to manage open source use, licence compliance and software supply chain security.
Black Duck Software, Inc. is an application security company founded in 2002 and headquartered near Boston, Massachusetts. It pioneered Software Composition Analysis (SCA), a category of tooling for tracking the open source components and licences used in a codebase. The company serves more than 4,000 organisations worldwide.
Its better-known product, Black Duck Software Composition Analysis, records which open source code an organisation uses and checks that its use conforms to licensing requirements. Alongside this sits an integrated application security platform that combines static application security testing (SAST), dynamic application security testing (DAST), SCA and AI-powered security testing, covering the software supply chain end to end.
The company's remit has broadened over time, from licence tracking to supply chain security, and its identity was streamlined to simply Black Duck. It operates under private equity ownership, having been acquired by Clearlake Capital and Francisco Partners in 2024.
