Blackduck is part of Devonshire which provides us automatic scanning. Black duck is not just for devops but also Secops. Blackduck has the most extensive open source KB in the industry Review collected by and hosted on G2.com.

I am expecting better governance of teams. I have various teams using the capacity and I need to know which team is using how much. Black duck can come up with tenancy. Review collected by and hosted on G2.com.

Black duck is certainly an industry leader in open source scanning primarily due to the fact that it is simpler to use and hence eliminate majority open source vulnerabilities and bugs and licensing issues. Should there be any enhancement request Blackduck is fairly adaptive and responsive towards implementing the same. Review collected by and hosted on G2.com.

The reporting could be enhanced as it does not provide the output the way one would expect it to be owing to which, it adds additional overhead to present the result in a better way Review collected by and hosted on G2.com.

Black duck software composition analysis works amazing on Mac, It has a good security and excellent features that protects and examines our source code from compliance issues. Review collected by and hosted on G2.com.

Black duck should add features like packet analysis and binary analysis for better performance. Review collected by and hosted on G2.com.

Quick inventory scan, Security and License risk management, integration for automatic scanning. Review collected by and hosted on G2.com.

It is slow, outdated design and is to expensive. Review collected by and hosted on G2.com.

Black duck serves as a good platform to identify third party software risk factors. It can be easily integrated as of part of CI/CD tools to scan security, license risk etc. It shows the exact break up of all the risky components of the binaries. Review collected by and hosted on G2.com.

It's very strict in compliance check so during upgradation of third party software it is diffcult to ignore some of the risks. But that shows how efficient Black duck software is. Also, using open source software creates license risks. Review collected by and hosted on G2.com.

Custom policies, IDE integration during the development life cycle.Jira tickets are being created for the issues Review collected by and hosted on G2.com.

Dont have any suggestion here which i have not liked so far. Review collected by and hosted on G2.com.

The report is crisp and easy for deciding actionable Review collected by and hosted on G2.com.

documentation could be better for implementation Review collected by and hosted on G2.com.

Comprehensive analysis. It does a good job finding everything. Review collected by and hosted on G2.com.

The output sucks, there's no comprehensive reports or nice UI or anything. It's all very basic/raw. They expect you to take all that raw information and make your own "pretty" reports with it, they have no product that can do that nor do they have any recommendations on 3rd party vendors that will do it. Review collected by and hosted on G2.com.

This is really an amazing and outstanding product that provides us a lot of information and it is progressing day by day with the passage of time. Hidden vulnerabilities and security exposures can easily and efficiently be identified with the help of this splendid software. It's interface is absolutely clean. Powerful tool for creating awareness related to legal security. Fit for open source packages. This software works very fast and really easy to scan. I love the integration offered by this software. Review collected by and hosted on G2.com.

I am fully satisfied with this software but I would say its reporting should be improved and it should have more preferable API experience. Another con is that users have to face difficulties while installing this software. Because of billing model, this application seems to be quite expensive. Review collected by and hosted on G2.com.

Scanning project for known vulnerabilities in the known 3rd party libraries. Review collected by and hosted on G2.com.

It gives you the information about security issues and licence constraints of known 3rd party libraries your project is using. Usually you don't have control or knowledge over all 3rd party libraries used in your project it is crucial to know whether current version has any kind of issues (security or licence). Having a tool to give you this information is a next level of quality of your product. It also suggests the update version with no known issues. Review collected by and hosted on G2.com.