Black Duck Hub

Black Duck Hub is an automated tool for securing and managing open source software in a company's products. Black Duck was acquired by Synopsys in December 2017, and Hub became part of the Synopsys Software Integrity Platform. It has since been presented under the Black Duck name for application security.

What Black Duck Hub offers

• Software composition analysis — finds open source components within code.
• Open source risk management — tracks security vulnerabilities and licence obligations.
• Supply chain security — gives visibility over what goes into software.
• Compliance support — the company ties its tools to software bill of materials needs.
• Wider application security — the current Black Duck portfolio adds static and dynamic testing and AI-assisted analysis.

Who it works with

The company says more than 4,000 organisations use its products, and it mentions embedded and safety-critical software teams.

Key facts

• Owner at acquisition: Synopsys, from December 2017
• Experience claimed: over 20 years of vulnerability intelligence