--- title: Black Duck Polaris Platform Reviews meta_title: 'Black Duck Polaris Platform Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 104 reviews by the users' company size, role or industry to find out how Black Duck Polaris Platform works for a business like yours. aggregate_rating: rating_value: 4.2 review_count: 104 scale: '5' date_modified: '2026-08-26' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Black Duck Polaris Platform Reviews **Vendor:** Black Duck **Category:** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis) **Average Rating:** 4.2/5.0 **Total Reviews:** 104 **AI Enabled:** This product embeds AI to enhance or extend its core functionality. ## About Black Duck Polaris Platform Black Duck builds trust in software by enabling organizations to manage application security, quality, and compliance risks at the speed their business demands. Black Duck solutions help developers to secure code as fast as they write it, development and DevSecOps teams to automate testing within development pipelines without compromising velocity, and security teams to proactively manage risk and focus remediation efforts on what matters most. With Black Duck, organizations can transform the way they build and deliver software, aligning people, processes, and technology to intelligently address software risks across their portfolio and at all stages of the application lifecycle. ## Black Duck Polaris Platform Pros & Cons Pros and Cons are compiled from review feedback and grouped into themes to provide an easy-to-understand summary of user reviews. **What users like:** - Users praise the **accuracy of findings** from Black Duck SCA, highlighting its powerful engine and extensive knowledge base. (1 reviews) - Users value the **powerful identification of open source issues** by Black Duck SCA, aided by extensive knowledge resources. (1 reviews) **What users dislike:** - Users find that Black Duck SCA requires **huge resources to deploy on-prem** , which can be a significant drawback. (1 reviews) ## Black Duck Polaris Platform Reviews ### 1. Reliable Open Source Security Tool with Strong CI/CD Integration **Rating:** 5.0/5.0 stars **Reviewed by:** Md Sarfaraz H. | Senior Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 25, 2026 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about Black Duck Polaris Platform?** I like that Black Duck SCA makes it easy to identify vulnerable open-source dependencies and keeps track of newly discovered security issues. The reports are clear, and the CI/CD integration fits well into the development workflow. It also helps with license compliance, which is a big plus. The AI-powered insights are useful for understanding and prioritizing risks. The only downside is the pricing—it can be expensive, especially for smaller teams, but the features and visibility it provides make it worthwhile for larger organizations. **What do you dislike about Black Duck Polaris Platform?** One thing I don't like is the pricing—it can be quite expensive, especially for smaller teams. The initial setup and configuration also take some time, and the interface can feel a bit overwhelming for new users. Occasionally, there are false positives that need manual review, and I'd like to see faster scans and more intuitive reporting and dashboards. Overall, it's a solid tool, but there's definitely room to improve usability and cost. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black Duck SCA helps us identify security vulnerabilities and license compliance issues in open-source dependencies before they become bigger problems. It gives us visibility into the components used across our applications and alerts us when new vulnerabilities are discovered. This helps our team fix issues earlier in the development cycle, reduces security risks, supports compliance requirements, and saves time during security reviews and audits. ### 2. Accurate Vulnerability Insights and Remediation—A Must-Have SCA Platform **Rating:** 5.0/5.0 stars **Reviewed by:** Sonal K. | Head of Strategic Initiatives, Small-Business (50 or fewer emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** July 20, 2026 **What do you like best about Black Duck Polaris Platform?** Black Duck is the world leader for its SCA platform. The platform gives accurate vulnerabilities, line-to-line, along with correct remediations to fix the code. Must to have in your organisation. **What do you dislike about Black Duck Polaris Platform?** Nothing so far. Everything is good as per any organisation requirements. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It solves Software Composition Analysis vulnerabilities like any deprecated libraries or packages used in your organisation and to replace them with the updated ones. ### 3. Powerful Open-Source Risk Management, Needs Easier Setup **Rating:** 4.5/5.0 stars **Reviewed by:** VIVEK S. | Specialist, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** May 18, 2026 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about Black Duck Polaris Platform?** I appreciate how Black Duck reduces audit stress with its automated compliance reporting. It strengthens DevSecOps workflows by embedding open-source risk management directly into the CI/CD process. I find the detailed dashboards for audits very useful, and I like the customizable rules for governance offered by the policy control features. **What do you dislike about Black Duck Polaris Platform?** The UI sometimes feels dated and requires expertise to configure effectively. Additionally, the setup is heavy and tough, with a need to make it lighter and reduce the installation process. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black Duck helps manage open-source risks by detecting vulnerabilities and ensuring license compliance. It automates compliance reporting, reducing audit stress, and strengthens DevSecOps workflows by integrating risk management into CI/CD pipelines. ### 4. Excellent Visibility into Open-Source Vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 28, 2026 **What do you like best about Black Duck Polaris Platform?** Black Duck provides excellent visibility into open-source vulnerabilities. It makes it very easy to track our dependencies and confirm we aren’t shipping code that contains known security flaws. **What do you dislike about Black Duck Polaris Platform?** At times, the scans return a high number of false positives, which creates extra manual work for our team to review and dismiss them. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black Duck helps us address the problem of hidden vulnerabilities in our open-source dependencies. The biggest benefit is that it significantly reduces our security risk by enabling developers to spot and remediate issues well before they make it into production. ### 5. High-Performing and Effective, with Appreciated Automatic Alerts **Rating:** 4.0/5.0 stars **Reviewed by:** Renato Z. | Business Development Leader, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** April 07, 2026 **What do you like best about Black Duck Polaris Platform?** Perfoming and effective. Automatic alerts are really appreciated and **What do you dislike about Black Duck Polaris Platform?** Prices are not affordable and UX interface not so easy. Sometimes scanning are a little slow **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black Duck helped us to understand where our code was not performing well. We improved visibility and we were able to keep under control security and legal risks ### 6. Powerful SCA Tool with Extensive Knowledge, but Resource-Heavy On-Prem Deployment **Rating:** 5.0/5.0 stars **Reviewed by:** Lokesh T. | Sr. Security Engineer, Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 17, 2025 **What do you like best about Black Duck Polaris Platform?** I found it as a best SCA tool, where its engine is very powerful in identifying Open source issues, And the main thing is that its Black Duck Knowledge is very huge **What do you dislike about Black Duck Polaris Platform?** The only drawback is it require huge resource to deploy in on-prem **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It solves addressing Open Source Issues basically its a Software composition Analysis tool. ### 7. Perfect for Managing Daily Tasks Efficiently **Rating:** 5.0/5.0 stars **Reviewed by:** Harshitha Y. | Research Assistant and Lab member, Higher Education, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** December 09, 2025 **What do you like best about Black Duck Polaris Platform?** I like for handling my day to day tasks and it is very handy **What do you dislike about Black Duck Polaris Platform?** nothing . i like synopsys e leraning but it is huge to follow tutorials **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** I am handling my tasks efficiently ### 8. A decent security software for any organization which is lighweight and useful also. **Rating:** 4.5/5.0 stars **Reviewed by:** Ambrish M. | Network Security Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 17, 2024 **What do you like best about Black Duck Polaris Platform?** Sentinel requires minimum RAM and processor to operate on a system that makes it easy to deploy amongst a large number of users. It is small in size that makes it easy to implement and use in multiple type of devices such as servers, endpoint devices etc. The support is also available with a handsome amount of sla for the users. Since it is used in many organizations, I believe this software is used very often by many company all over world. **What do you dislike about Black Duck Polaris Platform?** Sentinel is connected via cloud and uses on cloud services to deploy security policies that makes it a little bit slow to deploy security policies to users. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It is implemented to enhance security and provide a layer of data protection in any organization, which it is fulfilling its main purpose of use and it is cost effective too as compared to other competitors in the market such as trend micro apex one, sophos interecept X, kaspersky etc. ### 9. Sentinel has significantly made it easy for identifying threat and response process **Rating:** 4.0/5.0 stars **Reviewed by:** Muhammad M. | Penetration Tester, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 27, 2024 **What do you like best about Black Duck Polaris Platform?** The ability to provide real-time insights into the entire networks security threats and the the ease of integration with other services makes it a swiss knife army and the scalability accommodates large volume of data without affecting performance. It also enable us to customize alerts and dashboards according to our need which I've personally felt very effective. **What do you dislike about Black Duck Polaris Platform?** Sentinal is not a beginner friendly tool as it requires proper training and the interface isn't much intuitive so it makes harder to navigate. Additionally, costs can escalate quickly with large volumes of data, which may be a concern for organizations with short budget. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Sentinel is solving the challenge of managing and analyzing vast amounts of security data by providing a centralized, cloud-based SIEM solution. This benefits me as a cybersecurity professional by automating threat detection and response, reducing manual workloads, and allowing me to focus on strategic initiatives. ### 10. One of the best threat protections on devices **Rating:** 4.5/5.0 stars **Reviewed by:** Keerthi Kumar S. | SDET, Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through Google using a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 25, 2024 **What do you like best about Black Duck Polaris Platform?** Sentinel one runs smoothly on the background without causing any hindrance to work. **What do you dislike about Black Duck Polaris Platform?** There is nothing much to dislike about sentinel one **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Sentinel one helps in indentifying any threats from external or internal applications that might affect the device security which is helpful in avoiding risks. ### 11. My Experience with WhiteHat Sentinel **Rating:** 4.0/5.0 stars **Reviewed by:** Sharin S. | Team Lead - Azure and Windows server, Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** May 30, 2024 **What do you like best about Black Duck Polaris Platform?** Being able to scan production environment without impacting the performance is big advantage. The security policy builder is a great feature for setting a clear guidelines and automating the vulnerability detection's. The AI-powered false positive reduction is a life saver. It cuts down on the manual verification significantly. No need to juggle separate tools for different testing types. **What do you dislike about Black Duck Polaris Platform?** The WhitHat Sentinel isn't cheap, the cost can be a real hurdle. It took me more time to fully comfortable. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Identify and respond to a wide range of security threats accross an IT infra structure. ### 12. Sentinel - The only Endpoint protection you will require **Rating:** 5.0/5.0 stars **Reviewed by:** Mohammed Y. | Mid-Market (51-1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 19, 2023 **What do you like best about Black Duck Polaris Platform?** The dashboard in sentinel is great. The protection you get for not only with fleet of your devices but also the VM's. It is a great antivirus with a team of great support. **What do you dislike about Black Duck Polaris Platform?** Sentinel is versatile product and it is impossible to find anything to dislike about it. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Sentinel is a great product and helped us in informatin gathering and preparation and compilation. It helps us for scanning the source code vulnerability and then analysis/verify's the code security flws to find security critical vulnerabilities. The main problem which sentinel helped us overcome is having a detail report on critical vulnereabilities along with the remediation guidelines. ### 13. Comprehensive Online learning platform **Rating:** 4.5/5.0 stars **Reviewed by:** Vrushab Katamble P. | Vice President, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 02, 2023 **What do you like best about Black Duck Polaris Platform?** It's a one-stop place to access all the training needs, needed for me to stay competitive in the current market needs to upskill my skills. I can pick and choose the courses from their catalog and access and learn them at my pace along with my day-to-day schedule. The best part is the courses are affordable and we can opt for subscription-based services also. **What do you dislike about Black Duck Polaris Platform?** So far I have liked the courses they offer on their platform, so nothing noticeable which I do not like yet. I love it. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It is a one place stop for me to meet my training needs all in one place on their single platform and I do not have the search multiple platforms to meet my learning needs. Plus it is affordable and I can learn at my own pace slowly. Also ask questions, plus put my knowledge to test which other platforms do not offer this. ### 14. Best Product In Market **Rating:** 5.0/5.0 stars **Reviewed by:** Shriram B. | Sr. Software Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** April 06, 2024 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about Black Duck Polaris Platform?** Best Available product in the category. Make our work easy and solve our problem. **What do you dislike about Black Duck Polaris Platform?** There is nothing so far that we don't like about the product. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** For Our internal application security testing. ### 15. It seems like a good app for staff training. **Rating:** 4.5/5.0 stars **Reviewed by:** Ramon Eduardo P. | Programador, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **AI Translated:** This review has been translated from Spanish; Castilian using AI. **Reviewed Date:** May 21, 2024 **What do you like best about Black Duck Polaris Platform?** it looks very easy and is very comfortable for the staff to use- **What do you dislike about Black Duck Polaris Platform?** it is not translated and when translating it with Google, the context of some things is lost **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Currently, none were considering training options on various platforms and there was one, but the process was stopped. ### 16. Used to be wonderful for finding C++ bugs **Rating:** 2.0/5.0 stars **Reviewed by:** Flash S. | Senior Compiler Test Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Source: Organic Review from User Profile:** Invitation from G2. This reviewer was not provided any incentive by G2 for completing this review. **Reviewed Date:** May 31, 2024 **What do you like best about Black Duck Polaris Platform?** Sometimes finds breathtaking C++ out of bounds memory writes. **What do you dislike about Black Duck Polaris Platform?** Little progress since 2010’s; languages other than C/C++ extremely weak. Useless support since takeover by Synopsys. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Bugs ### 17. Learning platform with Wider and in depth scope **Rating:** 4.0/5.0 stars **Reviewed by:** Bilal A. | Senior Associate Security Analyst, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 06, 2023 **What do you like best about Black Duck Polaris Platform?** The presentational aspect of the content that is being served either to a begginer or a experienced professional is one of its kind with interreactive elements to give visual aspect to learning along with periodic assessment and feedback is valuable in order to improve and learning enahancement. **What do you dislike about Black Duck Polaris Platform?** The scope of the content provider is wider but it does have vaccume when it comes to serving learning content in newer domains along with more focus is put on theoritical aspects with little to show for hands on aspect. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** I have used this platform for cyber security training by going through various relevent courses in this domain for infrastructure security. ### 18. Best E-Learning platform for learning **Rating:** 4.5/5.0 stars **Reviewed by:** Amar k. | Senior Software Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 31, 2023 **What do you like best about Black Duck Polaris Platform?** - Synopsys offers coures catelog which offers huge number of topics. - Interactive and inovative things to make course more interesting like quiz, Puzzle - Best part is Synopsys focus on practical Knowledge - Easy to acces and setup. **What do you dislike about Black Duck Polaris Platform?** Synopsys eLarning platfrom for which i don't have dislike **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** - Practically focused Knowledge - We have our own choice of choosing time according to our schedule - Easy to access from any devices ### 19. Review for Sentinel **Rating:** 4.0/5.0 stars **Reviewed by:** Andre S. | Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 14, 2023 **What do you like best about Black Duck Polaris Platform?** Good security tool, which leaves a secure feeling, through the use of Sentinal you feel safe as a use. It is easy to use and offers a good user experience **What do you dislike about Black Duck Polaris Platform?** There are currently no negative points for me **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Microsoft Sentinel is a security solution that we use to detect and defend against attacks and threats from the Internet ### 20. It can be a one stop solution for assets security. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 16, 2023 **What do you like best about Black Duck Polaris Platform?** It's endpoints detection system with behavioral based alerts works fantastic. **What do you dislike about Black Duck Polaris Platform?** Dashboard is very bulky due to lot of features and options. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Its providing security from zero-day attacks with help of its advanced detection techniques. ### 21. good service and excellent support **Rating:** 5.0/5.0 stars **Reviewed by:** Neri Rafael C. | Developer TI, Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 31, 2022 **What do you like best about Black Duck Polaris Platform?** my position within the organization as DevSecOps and developer can be quite complicated without the use of services or tools such as those provided by the whitehat sentinel team, we have used it for more than 4 years and the development support is always elementary, the The issue of security is something serious and it is something that must be studied permanently, they help you to have what you need **What do you dislike about Black Duck Polaris Platform?** This is very complex since for the niche that they offer service, in my opinion, if they meet the expectations, so I could say that I do not find a specific point to suggest any improvement at the moment. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** security at all times is very important in each application development that involves data from clients and administrative personnel, this is something that must always be taken into account and this team does everything to shield our people. ### 22. Whitehat sentinel **Rating:** 4.5/5.0 stars **Reviewed by:** omkar r. | Consultant, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** February 02, 2023 **What do you like best about Black Duck Polaris Platform?** Security Experts analyse potential vulnerabilities. Minimal false positives. Alerts for newly discovered vulnerabilities.tracking all records previous as well as present. **What do you dislike about Black Duck Polaris Platform?** The vendor provides scanning, identification, engineering support and risked based reporting of security vulnerabilities. It is little bit slow other wise it is very good. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** The vendor provides scanning, identification, engineering support and risked based reporting of security vulnerabilities.it support to better quality of software. ### 23. Optimized code with Coverity tool **Rating:** 5.0/5.0 stars **Reviewed by:** Deepti S. | 5G Software Developer 2, Enterprise (> 1000 emp.) **Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 25, 2021 **What do you like best about Black Duck Polaris Platform?** I love the feature how coverity tool by synopsys can detect issues in the code and thus provides a way to make your code way more optimized. **What do you dislike about Black Duck Polaris Platform?** I dislike that sometimes there are false positive issues for which there is no perfect fix, but coverity indicate it as a bug. But there is always a way to declare that false positive and its good enough. **Recommendations to others considering Black Duck Polaris Platform:** Its a great tool to further improve your code **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** I am working on a project and coverity tool is really helpful in pin pointing the minor or major issues which one can ignore in there day to day work life. ### 24. Benchmark in software composition analysis **Rating:** 4.5/5.0 stars **Reviewed by:** Shreyans M. | Scrum Master, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 03, 2021 **What do you like best about Black Duck Polaris Platform?** One of the top solution providers to help manage security vulnerabilities, code quality, code smells, bugs and compliance risk associated with third-party open source code in an effective way. It supports wide range of languages some of which include Java, Cobol, Javascript, C#, C and C++. This software is the benchmark solution to elevate the continuous inspection element in CI/CD model **What do you dislike about Black Duck Polaris Platform?** The cost is relatively higher than the other solutions in the market which makes it a difficult choice for organisations **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Having used this software for a few years I have been able to cut down on a substantial amount of rework by detecting and analysing vulnerabilities before leveraging any open source code. With the timely upgradation of this software it becomes easy to stay updated in terms of the handling newer type of vulnerabilities introduced in the market ### 25. Legal and Operational risks management tool. **Rating:** 4.0/5.0 stars **Reviewed by:** Pratik H. | IT Project Coordinator, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 03, 2021 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about Black Duck Polaris Platform?** It has impressive features for both legal & security 3rd party software compliance. UI is easy to understand. It helps us to analyze the code in a timely and accurate manner. **What do you dislike about Black Duck Polaris Platform?** According to me it has all the features required. It is fast and easy to use. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** The support team is always available to resolve the problem if any. Rest it helps us to know what's in your code and analyze your code in a timely and accurate manner. ### 26. What's there in your code? **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 02, 2021 **What do you like best about Black Duck Polaris Platform?** Blackduck is part of Devonshire which provides us automatic scanning. Black duck is not just for devops but also Secops. Blackduck has the most extensive open source KB in the industry **What do you dislike about Black Duck Polaris Platform?** I am expecting better governance of teams. I have various teams using the capacity and I need to know which team is using how much. Black duck can come up with tenancy. **Recommendations to others considering Black Duck Polaris Platform:** Well suited:. Easily come out of pain to manage open source components. No worries, Black duck is to the rescue, it takes care of your pen source components in terms of license and security. Also SecOps eases with the super Black duck Less suited: can't really come up with a scenario, where it can be less suited. Until you stop using open source components in your code, quite impossible **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black duck being rich in its knowledge base about the vulnerabilities and license issues of open source components, quickly compares the identified inventory to the Black duck knowledge base and lists all the vulnerabilities and license issues in the code ### 27. Synopsis is the best platform for VLSI. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 07, 2021 **What do you like best about Black Duck Polaris Platform?** I have used the tools of Synopsys in the past years, spending most of my time utilizing them. They provide a unique feature that other companies in the present market do not offer. What I have done using these tools is the back-end implementation in VLSI. Their customer support is very good, and they provide solutions when a customer faces issues. They come with many training sessions conducted by trained staff for beginners or those new to the tools. They also provide documentation of the tools for the reader. **What do you dislike about Black Duck Polaris Platform?** License the synopsis and training sessions; the synopsis is a bit costly, which is not affordable to everyone. **Recommendations to others considering Black Duck Polaris Platform:** What I recommend instead of directly jumping to handling tools like Synopsys Pro E and extended features is to learn to get handy with the tools Synopsys provides. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Unlike any other tools with which I work, whole sy posys tools have a separate e-learning center to provide the utmost knowledge to the user, enabling them to gain complete knowledge and excel in their work. ### 28. Need of today’s market **Rating:** 4.5/5.0 stars **Reviewed by:** SAILEE J. | Scrum Master [Associate], Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 03, 2021 **What do you like best about Black Duck Polaris Platform?** Black duck is certainly an industry leader in open source scanning primarily due to the fact that it is simpler to use and hence eliminate majority open source vulnerabilities and bugs and licensing issues. Should there be any enhancement request Blackduck is fairly adaptive and responsive towards implementing the same. **What do you dislike about Black Duck Polaris Platform?** The reporting could be enhanced as it does not provide the output the way one would expect it to be owing to which, it adds additional overhead to present the result in a better way **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It is very quick and responsive I remember including us small sized code from a random source and Blackduck immediately identified it ### 29. Good security, Stable and feature rich. **Rating:** 4.5/5.0 stars **Reviewed by:** Ali s. | Customer Service Representative, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** November 22, 2021 **What do you like best about Black Duck Polaris Platform?** Black duck software composition analysis works amazing on Mac, It has a good security and excellent features that protects and examines our source code from compliance issues. **What do you dislike about Black Duck Polaris Platform?** Black duck should add features like packet analysis and binary analysis for better performance. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** We use black duck to audit our source code to protect from liscence and open source compliance. It is easy to use, stable, and well recognized in the industry. ### 30. Coverity SAST Review **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 21, 2021 **What do you like best about Black Duck Polaris Platform?** We use the Coverity Static Analysis tool for security scans of C/C++ server code. Coverity is having a higher detection rate as we highly rely on this code scan for our application code. We had seamlessly integrated this SAST tool (Coverity) to our CI/CD Pipeline and the vulnerabilities were being notified to the respective developer via mail. It provides a mechanism to audit the findings and mark false positives in an effecient way. Support for several languages is one another factor that stands out well when compared to other tools. Time it takes to scan huge code lines is significantky faster compared to other tools. **What do you dislike about Black Duck Polaris Platform?** However there are some improvements points which I thought I should highlight to make this tool even more better for the end users. strzcpy vs. NULL_STRING Coverity does not recognize that strzcpy adds a terminating x00. ab_pfetch* On Windows we currently have many OVERRUN false positives. bsearch on fixed width table vs. Literal Coverity’s model for bsearch assumes that bsearch access the key on the full width of the key. If bsearch is given a fixed (max) size table, and say strcmp as compare function, then in reality when bsearch is called with a small literal as key, then all is good. Alas Coverity thinks that bsearch will read beyond the end of the literal, even though strcmp will not. NO_EFFECT on var_arg On Windows we currently have a NO_EFFECT warning on all uses of va_args TAINTED_SCALAR Coverity to warn for uses of tainted data, data that might be controlled by an attacker. This may lead to data corruption, code injection,... When possible Coverity reports additional defects describing the dangerous use of the tainted data INTEGER_OVERFLOW. RW.LITERAL_OPERATOR_NOT_FOUND on printf with TEL_Format When using TEL defined format such as TEL_Flpu, TEL_Fsu, TEL_Fpid ,... Coverity sometimes requires a space before the 'T' from TEL_Fxxx. TAINTED_STRING Coverity to warn for uses of tainted data, data that might be controlled by an attacker. This may lead to data corruption, code injection, SQL injection, directory traversal, PW.PRINTF_ARG_MISMATCH - * precision or * size vs. size_t or ptrdiff_t parameters 64 bits builds or scans - The C-Standard states that the * precision or size are of type int. This is generally 4 bytes. On 64 bits builds size_t and ptrdiff_t are 8 bytes. If I had submitted a fix yesterday, today’s Coverity Connect continue to report the defect. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** We use Coverity to solve both Quality and Security issues. Outpf bound access Uninitialized pointer reads Calling risky functions Resource leak and lot more ### 31. SecOps made easy **Rating:** 4.5/5.0 stars **Reviewed by:** Shayna A. | Academic Specialist, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** October 29, 2021 **What do you like best about Black Duck Polaris Platform?** Quick inventory scan, Security and License risk management, integration for automatic scanning. **What do you dislike about Black Duck Polaris Platform?** It is slow, outdated design and is to expensive. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Black Duck being well established about the vulnerabilities and license issues of open source components, quickly compares the identified inventory to the Black Duck knowledge base and lists all the vulnerabilities and license issues in the code. ### 32. Black duck is an excellent and reliable software to detect vulnerablities and security risks. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 07, 2021 **What do you like best about Black Duck Polaris Platform?** Black duck serves as a good platform to identify third party software risk factors. It can be easily integrated as of part of CI/CD tools to scan security, license risk etc. It shows the exact break up of all the risky components of the binaries. **What do you dislike about Black Duck Polaris Platform?** It's very strict in compliance check so during upgradation of third party software it is diffcult to ignore some of the risks. But that shows how efficient Black duck software is. Also, using open source software creates license risks. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Using Black duck for binary scans as a part of DevOps activity to ensure the security and operation risk complaince that has helped to manage the risks and triage vulnerabilies in the softwares. ### 33. A SAST which supports multiple languages and platforms. **Rating:** 4.0/5.0 stars **Reviewed by:** Viraj P. | Associate Lead - Application Security Engineer, Mid-Market (51-1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 21, 2021 **What do you like best about Black Duck Polaris Platform?** Assigning issues to users is simply easy and less false positives. **What do you dislike about Black Duck Polaris Platform?** Reporting portion and for results it take more time than other solutions. **Recommendations to others considering Black Duck Polaris Platform:** A good SAST solution if you are considering multi-platforms and fewer false positives. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It helps to identify bugs related to security during our application lifecycle. ### 34. Promising tool of future- static code analysis tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 07, 2021 **What do you like best about Black Duck Polaris Platform?** helps development and security teams address security and quality defects early in the software development life cycle (SDLC), Best thing about Coverity is highly accurate, supports thousands of developers, and quickly analyzes large projects exceeding 100 million lines of code. **What do you dislike about Black Duck Polaris Platform?** Few pointers definitely needs improvement would be resources leaks. dereferences of NULL pointers. incorrect usage of APIs. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Have used Coverity Quality Advisor and solved issues like: resources leaks. dereferences of NULL pointers. incorrect usage of APIs. use of uninitialized data. memory corruptions. buffer overruns. control flow issues. error handling issues. ### 35. Easy to use for Coverity fixes **Rating:** 4.5/5.0 stars **Reviewed by:** Nikhil D. | Software Engineer, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 30, 2021 **What do you like best about Black Duck Polaris Platform?** Its user friendly UI. It easy to browse code using Coverity and it also briefly describes about the issue. **What do you dislike about Black Duck Polaris Platform?** I was facing issue in categorising the Coverity issues. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** I have mainly used for solving Coverity fixes. It catches the basic issues which can be easily fixed and helps in improving the code base. ### 36. Coverity is an excellent tool from Synopsis. **Rating:** 4.0/5.0 stars **Reviewed by:** Sumit K. | Software Engineer, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 13, 2021 **What do you like best about Black Duck Polaris Platform?** It is easy to use the tool. And helps to find any issue that is overlooked in manual review. **What do you dislike about Black Duck Polaris Platform?** The tool is pretty good. It is easy to set up with proper guidelines. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Secured code review. ### 37. An amazing tool for static analysis - used this extensively during my tenure at STMicroelectronics **Rating:** 4.5/5.0 stars **Reviewed by:** Swarup A. | Project Manager, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 24, 2021 **What do you like best about Black Duck Polaris Platform?** Excellent User Interface and server-side features. The Coverity support team is also very responsive **What do you dislike about Black Duck Polaris Platform?** I did not find any such attribute during my experience **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Static analysis integration with CI-CD DevOps pipeline and improvement of code quality ### 38. Black Duck SCA tool for vulnerabilities **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 13, 2021 **What do you like best about Black Duck Polaris Platform?** Custom policies, IDE integration during the development life cycle.Jira tickets are being created for the issues **What do you dislike about Black Duck Polaris Platform?** Dont have any suggestion here which i have not liked so far. **Recommendations to others considering Black Duck Polaris Platform:** It was part of the ci/Cd pipeline to detect and create the jirra issues for corresponding vulnerabilities **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** It was part of the ci/Cd pipeline to detect and create the Jira issues for corresponding vulnerabilities ### 39. Very convenient and user friendly tool for software engineering **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Automotive | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Source: Seller invite:** Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review. **Reviewed Date:** September 09, 2021 **What do you like best about Black Duck Polaris Platform?** Ease with which we one produce highly scalable software and address security issues. **What do you dislike about Black Duck Polaris Platform?** Coverituy tool can update to provide more content to its customers. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Synopsys Coverity tool was really helpful in addressing static errors in code. ### 40. Best tool for Static and Security code analysis **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 26, 2021 **What do you like best about Black Duck Polaris Platform?** It gives an accurate, detailed report, which is helpful for both upper-level Management and for developers. **What do you dislike about Black Duck Polaris Platform?** Nothing as of now. We liked it very much. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** WE are solving static code issues or if there are security-related issues like SQL injection and all. ### 41. Great security product **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 12, 2021 **What do you like best about Black Duck Polaris Platform?** The way it scans and provide results which makes life easier **What do you dislike about Black Duck Polaris Platform?** The UI/UX could have been better to browse through results **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Finding the security bug while doing the continous build is really helpful ### 42. Static tool result as a mailnotification to code commitors **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Source: Seller invite:** Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review. **Reviewed Date:** September 12, 2021 **What do you like best about Black Duck Polaris Platform?** Code scanning at its best................... **What do you dislike about Black Duck Polaris Platform?** I agree it is not a open source now........ **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Daily scan reports of the code along with the integrated html files to send mail notification for developers ### 43. It was nice, would like to explore more **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 30, 2021 **What do you like best about Black Duck Polaris Platform?** It is cost-efficient, and highly secured. **What do you dislike about Black Duck Polaris Platform?** They don't yet have great support for web services or native mobile apps, but as I understand, that is on its way. That is the only critics I have to offer. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** They don't yet have great support for web services or native mobile apps, but as I understand, that is on its way. That is the only critics I have to offer. ### 44. Good for Static analysis integration **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through Google using a business email account **Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate. **Reviewed Date:** September 12, 2021 **What do you like best about Black Duck Polaris Platform?** Friendly UI, easy to use coverity for bugs and defects tracing **What do you dislike about Black Duck Polaris Platform?** Cost could be little lesser . Sometimes accuracy is not there, false positives pop up. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Mostly in resource leak ### 45. DBA **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Source: Seller invite:** Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review. **Reviewed Date:** September 08, 2021 **What do you like best about Black Duck Polaris Platform?** To find out quality defects,track and managed risk across the application **What do you dislike about Black Duck Polaris Platform?** There is nothing to dislike, if the cost is little less then it could be better **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Currently not use ### 46. The report is crisp and easy for deciding actionables **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Utilities | Small-Business (50 or fewer emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** September 08, 2021 **What do you like best about Black Duck Polaris Platform?** The report is crisp and easy for deciding actionable **What do you dislike about Black Duck Polaris Platform?** documentation could be better for implementation **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Able to find out the vulnerabilities and keep my systems secure & compliant ### 47. DevOps Manager for IT and embedded software development **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Automotive | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** August 29, 2021 **What do you like best about Black Duck Polaris Platform?** Better sca findings for embedded development. Good with SAST findings. Good dashboard. **What do you dislike about Black Duck Polaris Platform?** UX could be improved. Ability to auto fix could be worked on. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** SCA and SAST. Benefitof quality code ### 48. A good tool for static code analysis **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Hardware | Enterprise (> 1000 emp.) This reviewer's identity has been verified by our review moderation team. They have asked not to show their name, job title, or picture. **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 15, 2020 At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review. **What do you like best about Black Duck Polaris Platform?** The scan results are presented in detail and concise. **What do you dislike about Black Duck Polaris Platform?** The configuration is confusing and sometimes misleading. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** For coverity and misra compliance on firmware which has been implementated for the past over ten years. accumulated huge amount of violations; ### 49. Coverity - nice functionality, cluttered UI **Rating:** 3.0/5.0 stars **Reviewed by:** Daniel N. | Graduate Software Engineer, Enterprise (> 1000 emp.) **Validated Reviewer:** Validated through LinkedIn **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** May 28, 2020 **What do you like best about Black Duck Polaris Platform?** Finds many bugs and memo leaks, nice groups features **What do you dislike about Black Duck Polaris Platform?** Cluttered UI, tough to navigate through it **Recommendations to others considering Black Duck Polaris Platform:** I would recommend it, as apart from the slightly unintuitive UI, it is a nice tool. However, it is a bit old, so ensure you have looked on the market to check if there is anything better out there. My main advice will be to target the tools towards your needs regarding the languages you use, but it is always better to pick a flexible tool that covers many languages, so that in the future you can expand your language base, whilst staying on top of any security isssues. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** Finding bugs and memo leaks in a variety of languages. Its API for Java is also an easy one to use and is well-documented. I really like that once these are assigned to you, you get reminders via email (it can be nicely integrated with Outlook), so that you don't forget. The detailed information on the issues and how they are represented graphically are also amongst its benefits. ### 50. A must to have tool for an open-source project **Rating:** 5.0/5.0 stars **Reviewed by:** Ivan P. | Small-Business (50 or fewer emp.) **Validated Reviewer:** Validated through a business email account **Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review. **Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review. **Reviewed Date:** June 04, 2020 **What do you like best about Black Duck Polaris Platform?** I like that Coverity Scan is Free for open-source projects. In fact, I have not used the tool in production reasons, but rather for study/education/research purposes. In fact, we carried our a benchmarking of Static Analysis Security Testing tools for research purposes from the perspective of a tool to be able to produce alerts meaningful for software developers. And I can say that Coverity demonstrated itself as a very good tool. **What do you dislike about Black Duck Polaris Platform?** There is nothing particular about Coverity that I dislike. Maybe only that there is no free version for educational reasons. **What problems is Black Duck Polaris Platform solving and how is that benefiting you?** I use Coverity Scan to scan my Open Source projects. Also, I used the results available for other projects to understand how secure these projects are and use them for research purposes. ## Black Duck Polaris Platform Discussions - [Where we can find documentation of each defensics protocol fuzzing ?](https://www.g2.com/discussions/11929-where-we-can-find-documentation-of-each-defensics-protocol-fuzzing) - 1 comment, 1 upvote - [View Black Duck Polaris Platform pricing details and edition comparison](https://www.g2.com/products/black-duck-polaris-platform/reviews?section=pricing&secure%5Bexpires_at%5D=2026-08-26+13%3A05%3A34+-0500&secure%5Bsession_id%5D=b6550489-fe54-4b44-857b-3ad2699d5a42&secure%5Btoken%5D=b006a28519639a65633c1410d5e85bfa6bcfc983fa3af444d0aba678b63b187d&format=llm_user) ## Black Duck Polaris Platform Integrations - [AuthenticID ID Verification](https://www.g2.com/products/authenticid-id-verification/reviews) - [Automated CICD Jenkins: SonarQube & OWASP Code Testing](https://www.g2.com/products/automated-cicd-jenkins-sonarqube-owasp-code-testing/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) ## Black Duck Polaris Platform Features **Additional Functionality** - Tagging - Natural Language Processing - Data Extraction - Multi-Language - Predictive Analytics - Drag & Drop - Speech Recognition - Reporting/Analytics - Data Storage Management - Virtual Personal Assistant (VPA) - AI Copilot - Customer Segmentation - Collaboration Tools - Data Import/Export - Generative AI - For eCommerce - Role-Based Permissions - Customizable Branding - Search/Filter - Monitoring - Document Management - API - Data Visualization - Trend Analysis - Machine Learning - Access Controls/Permissions - Alerts/Escalation - Performance Metrics - Real-Time Data - Third-Party Integrations - Mobile App - Multiple Data Sources - For Sales Teams/Organizations - Sentiment Analysis - Activity Dashboard - Chatbot - Workflow Automation **Additional Functionality** - Code Generation - Text to Image - Generative AI - API - Natural Language Processing - Virtual Characters and Avatars - Content Generation - Personalization and Recommendation - Conditional Generation - Transformer Model - Automated Image & Video Editing - Interactive and Co-Creative Systems - Text Summarization - Data Augmentation - Variation Autoencoder Models - Adversarial Training - Transfer Learning and Fine-tuning - Simulation and Scenario Generation - Creative Design - AI Copilot - Prompt Engineering - Foundation Model **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Administration** - API - Extensibility - Reporting and Analytics **Administration** - API / Integrations - Extensibility **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Extensibility** - Customization - White-Labeling - Content Library **Documentation** - Feedback - Prioritization - Remediation Suggestions **Agentic AI - Static Code Analysis** - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Performance - AI AppSec Assistants** - Remediation - Real-time Vulnerability Detection - Accuracy **Analysis** - Issue Tracking - Reconnaissance - Vulnerability Scan - Compliance Management - Automatic Scans - SPA Scans **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Analysis** - Reporting - Baselining - Real-Time Code Analysis **Security** - False Positives - Custom Compliance - Agility **Integration - AI AppSec Assistants** - Stack Integration - Workflow Integration - Codebase Contextual Awareness **Testing** - Command-Line Tools - Manual Testing - Test Automation - Performance and Reliability **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Assessment** - Integrated Learning - Gamification - Continuous Assesment - Developer Assesment **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Additional Functionality** - Network Mapping - Activity Dashboard - SQL Injections - Audit Management - Threat Intelligence - Assignment Management - Integration Management - User Management - Asset Discovery - Remediation Management - Vulnerability Scanning - Generative AI - Multi-User Collaboration - AI Copilot - Web-Application Security - Vulnerability Assessment - Security Auditing - Runtime Container Security - Network Scanning - Password Cracking - Simulated Threat Attacks - Certificates - Alerts/Notifications - Real-Time Data - Cross-Site Scripting - Exploit Frameworks **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard ## Top Black Duck Polaris Platform Alternatives - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - 4.4/5.0 (152 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) - 4.5/5.0 (135 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews)