Black Duck Primary Use Case

TundeOgunkoya
Consulting Partner, Cyber Security Delivery - Africa at DeltaGRiC Consulting
We have been using this solution for between two and three years. We frequently use this solution for software composition analysis. We also use it for vulnerability assessment and operational risk assessment. This is usually for customers who want to do one-off assessments, trying to check open source components they are using in their build. View full review »
Zvika-Ronen
Chief Technology Officer (CTO) at FOSSAWARE
I'm a technology leader and an open source compliant and risk expert. I lead two domains, both are open source compliant. We use Black Duck in order to make internal audits on software during development, for license compliance, open source compliance, and open source vulnerability. We have an open source audit team, which has some administration rights on the tool and can make changes to the reports based on feedback from business units. Remaining users have permission via tokens to view reports. We would have around 300 users. Up to 20 users can access the system at any one time. The product is used on a daily basis. View full review »
Costas-Voliotis
Co-Founder CTO/CPO at Source Code Inspection
We use Black Duck Hub to discover commercial and open-source licenses and the licensed software used by a company. Whenever a company enters the M&A process, a preliminary step called due diligence is done. A part of it is the technical discovery that includes finding out what software the company is using and whether the software is linked with any open-source software or commercial product for which you have to pay a license. Our main use case is to discover the license and find out if there is an obligation for the paid license. We also check the exposure of the software to open-source libraries. Open source is great, and it is a preferred solution for many companies. Around 90% of the software is now open source, but it is also exposed to vulnerabilities. So, through the dependencies that we were discovering, we were also working on the security exposure of the software product. For this purpose, we use Black Duck Hub. View full review »
Learn what your peers think about Black Duck. Get advice and tips from experienced pros sharing their opinions. Updated: January 2021.
454,950 professionals have used our research since 2012.
reviewer1421445
Former SVP at a manufacturing company with 5,001-10,000 employees
We're primarily using the solution for compliance. It's part of an audit process. View full review »
reviewer1361340
Project Lead at a manufacturing company with 10,001+ employees
We use Black Duck to examine our source code for compliance issues. View full review »
RaviShankar
Lead Product Enginner at Harman International Industries, Incorporated
We are using this solution for software analysis and vulnerability scanning. View full review »
Learn what your peers think about Black Duck. Get advice and tips from experienced pros sharing their opinions. Updated: January 2021.
454,950 professionals have used our research since 2012.