United States
Black Duck is an application security company whose open source audits and software composition analysis are a standard component of tech/code due diligence in M&A.
Offers AI-powered application security capabilities (e.g., Black Duck Signal) and addresses risks from AI-generated code via snippet matching and analysis.
CI/CD tools (Jenkins, GitLab CI, Azure DevOps), IDEs (Visual Studio, IntelliJ), issue trackers (Jira) and major source‑code repositories.
Black Duck provides application security and software composition analysis (SCA) solutions, including Black Duck Audits used in M&A technical due diligence to analyze a target's codebase for open source components, license compliance issues and security vulnerabilities. Formerly the Synopsys Software Integrity Group, the business was acquired by Clearlake Capital and Francisco Partners in 2024 and relaunched as the independent company Black Duck Software, Inc. Its products serve development, security and M&A teams at over 4,000 organizations.
Key differentiators highlighted by the vendor.
Other tools in the same category worth comparing.
United States
Kira is an AI-powered contract intelligence solution that helps legal teams analyze contracts with proven accuracy, flexible governance controls, and collaborative workflows for high-volume review. Its multi-layer AI combines GenAI with proprietary models to deliver 95% contract review accuracy. Backed by 30 years of legal expertise and a decade of AI innovation from Litera, Kira brings precision and reliability to contract analysis.
Learn more
United States
AlphaSense is a market intelligence and search platform that uses AI to help financial professionals extract insights from 10,000+ public and private sources.
Learn more
Germany
SMASHDOCs is a German web-based document collaboration platform with patented change tracking, used by lawyers and dealmakers to draft and negotiate transaction documents.
Learn more