- Home
- Dependency Management Software
- Black Duck SCA
On the recordRead 9 Oct 202614 facts
Black Duck SCA
Burlington, Massachusetts, United States
Plans and prices
Open source detection (enterprise edition)
Priced on request
Unlimited application and container scans · binary and firmware analysis · AI/ML model risk insight · SBOM import/export
Read 9 Oct 2026 · blackduck.com
Standard Edition
Priced on request
Unlimited application and container scans · SBOM import/export · vulnerability management · license compliance
Read 9 Oct 2026 · blackduck.com
On the record
- AI model insight
- The enterprise feature list includes detection of AI/ML models in projects and evaluation of model origin, usage, and model card.blackduck.com · read 9 Oct 2026
- Container scanning
- Black Duck says it scans Docker and other containers and monitors existing applications and containers for newly disclosed vulnerabilities.blackduck.com · read 9 Oct 2026
- Deployment
- Black Duck SCA is available as hosted or on-premises software, including options for air-gapped environments.blackduck.com · read 9 Oct 2026
- Detection
- It combines dependency, binary, and snippet analysis to identify components and build an SBOM.blackduck.com · read 9 Oct 2026
- Implementation
- The listed plan features include implementation and adoption services, and continuous application monitoring before and after deployment.blackduck.com · read 9 Oct 2026
- Integrations
- Black Duck lists integrations across IDEs, source control, CI/build tools, package managers, workflow tools, and production capabilities, and says it offers REST APIs.blackduck.com · read 9 Oct 2026
- Language support
- The product page says it supports common package managers and languages, while signature scanning is language-agnostic; it directs buyers to contact Black Duck for the current supported list.blackduck.com · read 9 Oct 2026
- License compliance
- Features include open source license identification, notices reports, and, in the enterprise feature list, full license text and obligation tracking.blackduck.com · read 9 Oct 2026
- Price availability
- The product page directs prospective customers to Get pricing and displays no plan price.blackduck.com · read 9 Oct 2026
- Purpose
- Black Duck SCA helps teams manage security, quality, and license compliance risks in open source and third-party code.blackduck.com · read 9 Oct 2026
- SBOM formats
- Black Duck SCA supports SBOM import and export in SPDX and CycloneDX formats.blackduck.com · read 9 Oct 2026
- Supported tools
- Examples on the integrations page include GitHub, GitLab, Jenkins, Maven, npm, Artifactory, and Jira Software.blackduck.com · read 9 Oct 2026
- Vulnerability handling
- It provides Black Duck Security Advisories, prioritization and reachability metrics, remediation guidance, and malicious package detection.blackduck.com · read 9 Oct 2026
