Why the future of application security isn’t AI or SAST—it’s both

AI code scanning and SAST aren't competing tools—they're complementary ones. Discover why the strongest application security programs use a hybrid model that pairs SAST as the foundation with AI where semantic reasoning ...

Accenture offers True Scale Application Security to clients worldwide

Accenture expands its Black Duck partnership to deliver comprehensive AST solutions with the Polaris platform for flexible, scalable security. The post Accenture offers True Scale Application Security to clients worldwide appeared first ...

AI coding security gap: 76% of orgs expose software supply chain to risk

95% of organizations use AI for development, but only 24% properly evaluate AI-generated code for security, IP, and quality risks. Learn how to protect your software supply chain.The post AI coding security ...
Black Duck’s product release round-up: faster fixes, smarter security

Black Duck’s product release round-up: faster fixes, smarter security

Explore the latest updates across the Black Duck portfolio—from GitHub integrations and AI-powered fixes to faster scans, audit-ready SBOMs, and workflow automation.The post Black Duck’s product release round-up: faster fixes, smarter security ...

Black Duck named a Leader in the 2025 Gartner Magic Quadrant for Application Security Testing for the eighth time

Discover why Black Duck was named a Leader in the 2025 Gartner Magic Quadrant for Application Security Testing for the eighth time. Learn about our innovative security solutions and commitment to customer ...

AI in DevSecOps: A critical crossroads for security and risk management

Explore the dual impact of AI in DevSecOps: enhancing security through automation while introducing new risks. Learn how to balance AI-driven innovation with robust security measures.The post AI in DevSecOps: A critical ...
Accelerate onboarding and testing of GitHub repos with the Black Duck Security app

Accelerate onboarding and testing of GitHub repos with the Black Duck Security app

Discover how the Black Duck Security GitHub app simplifies onboarding and continuous synchronization of GitHub repositories with Black Duck SCA, Coverity, and Polaris for enhanced application security.The post Accelerate onboarding and testing ...

What you need to know about the NIST Secure Software Development Framework

Learn about the NIST Secure Software Development Framework (SSDF) and how to implement its practices to enhance software security. Discover the benefits of SSDF for software producers and consumers.The post What you ...
Unlocking the full potential of application security: Key findings from the Black Duck customer value study

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

Discover how Black Duck's AppSec solutions improve productivity, reduce software risk, and lower costs. Learn from the UserEvidence study about the benefits of integrating AppSec throughout the SDLC.The post Unlocking the full ...

Key takeaways from the “2024 Software Vulnerability Snapshot” report

Discover the key findings from Black Duck's 2024 Software Vulnerability Snapshot report. Learn about the most common vulnerabilities, industry insights, and actionable DevSecOps strategies to enhance application security.The post Key takeaways from ...