Black Duck - Open Source Audits

Black Duck is a complete open source management solution, which fully discovers all open sources in your code.

It can map components to known vulnerabilities, and identify license and component quality risks. You can use Black Duck to set and enforce open source policies and integrate open source management into your DevOps environment. Additionally, Black Duck monitors and alerts you when new threats are reported.

Black Duck helps security and development teams identify and mitigate open source related risks across application portfolios.

Black Duck:

• Scans and identifies open source software throughout your code base.
• Maps vulnerabilities to your open source software.
• Triages vulnerability results and tracks remediation.
• Monitors for newly disclosed vulnerabilities in your open source code.
• Finds and fixes open source vulnerabilities in applications and containers.