55 Black Duck Testimonials

“Black Duck confirmed our third-party software validation practices. Softegrity SpA, a Synopsys Software Integrity reseller partner, helped to support the relationship between Dextra Technology and Black Duck for this process. With Black Duck and Softegrity, we have partners that we can use to continue strengthening our internal toolchain so that we maintain a high standard of source quality, avoiding potential risks.”

“With the Black Duck Suite we found the right solution to execute our open source governance policy by providing a scalable and transparent approval process.”

We took the path of looking into tools to improve code quality and security as early as possible in the development lifecycle."

“In 2014, when I came on board to manage the AppSec awareness and training program, we were looking at training for around 12,000 employees spread over 54 countries."

“Security is a requisite in the FinTech space, Synopsys’ application validation program leverages Synopsys’ security testing technology and expertise to ensure that applications published on the FusionFabric.cloud platform are designed, developed, and deployed with the highest standards for security.”

“Essentially, from a technical standpoint, Black Duck met Entersekt’s checklist of what we needed in an open source vulnerability management solution better than any other vendor. The responsiveness and support from both its customer success and technical support teams also led us to make the business decision to select Black Duck.”

“We wanted a solution that could seamlessly integrate with our technology stack, was easy to use, and provided relevant feedback on mitigating any threats found in the open source used in our code and we wanted that to happen as early as possible in the development cycle.”

"What Black Duck does is put a light on open source code problems prior to release of a new version of our product. It’s helped us correct issues, plus ensure we don’t have similar issues in the future."

“We click one button to set up a CI plan, and it pulls in everything from Black Duck, Defensics, Coverity, and our other security analysis tools, and they automatically get plugged in and start generating reports and scans, and if a bug needs to be fixed, it gets into our bug management system right away.”

“It was quickly established that Black Duck, as recommended by GENIVI, was indeed the best solution for the job.”

"Automating the search and selection of OSS with Black Duck gives us the tools we need to put customers at ease."

“We have over a hundred products, with each of those products themselves having hundreds to thousands of different open source components. A decade ago, we had little concept of identifying and understanding open source security vulnerabilities in our BOM. The move to Black Duck was to address our not knowing about open source security issues. We recognized that we needed a solution to ensure we were tracking and managing open source and commercial components as part of our overall software security initiative.”

“All of our core products are using Code Center. About three years ago, we began to use Black Duck SCA when building the CI/CD process for our JDA Luminate product line, newly developed, SaaS-native products. Our goal is full migration to Black Duck SCA by the beginning of 2020.”

"We can get results from all the tools we use consolidated into one place, and get the results filtered down to only the information we need."

“With Synopsys Coverity and Black Duck solutions, we were able to achieve our safety and quality standard certifications.”