Black Duck Logo

Black Duck pros and cons

Vendor: Synopsys
3.9 out of 5
Badge Ranked 1
764 followers
Post review
 

Black Duck Pros review quotes

TO
May 28, 2019
It highlights what the developers have done, and it shows the impact from an intellectual property point of view.
ZR
Jan 15, 2020
I like the fact that the product auto analyzes components.
CV
Dec 15, 2020
The knowledge base and the management system are the most valuable features of Black Duck Hub. It has a very helpful management environment. They offer an editor where we can check the discovered license, which is retrieved from their knowledge base. They have a huge knowledge base build over the years. It gives you some possibilities, such as this license with possibility A could cause a vulnerability issue or a potential breach.
Learn what your peers think about Black Duck. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,246 professionals have used our research since 2012.
Alina-Eugenia Negulescu - PeerSpot reviewer
Aug 25, 2023
Policy management is a valuable feature.
Aaron  P - PeerSpot reviewer
Sep 15, 2023
The UI is the solution's most valuable feature since it allows for easy pipeline integration.
SK
Sep 27, 2020
The solution works well on Mac products.
SK
Jun 7, 2020
The stability is okay.
JR
Aug 26, 2021
Black Duck is pretty extensive in terms of the scan reserves and the vulnerability exposures. From that perspective, I'm happy with it.
MC
Aug 6, 2021
The installation is very easy.
Saravanan_Radhakrishnan - PeerSpot reviewer
Mar 5, 2024
The product enables other applications to be secure.
 

Black Duck Cons review quotes

TO
May 28, 2019
I would like to see more integration with other solutions, such as IntelliJ IDEA.
ZR
Jan 15, 2020
The scanner client is limited by the size of software it can handle.
CV
Dec 15, 2020
It is a cloud-only solution. In many cases, companies like to evaluate the software, but they're very reluctant to give you the software. It would be great if they could offer an on-prem component that could be used to scan the code and then upload the discovery results to the cloud and get all the information from there, but there is no such possibility. You have to upload the code to the Black Duck cloud system. Of course, they have a strong legal department, and they offer some configuration, but it is never enough. You have to give the code, which is a drawback. In modern designs like Snyk or FOSSA, you don't need to give the code. It requires more native integration with Coverity because they go together technically. You need both Coverity and Black Duck Hub. It would be really helpful for companies working in this space to get a combined offer from the same company. They should provide an option to buy Coverity for an additional fee. Coverity combined with Black Duck Hub will provide a one-step analysis to get everything you need and a unified report. It would be really great to be able to connect Black Duck Hub with Coverity unified reports.
Learn what your peers think about Black Duck. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,246 professionals have used our research since 2012.
Alina-Eugenia Negulescu - PeerSpot reviewer
Aug 25, 2023
The documentation is quite scattered.
Aaron  P - PeerSpot reviewer
Sep 15, 2023
The solution's pricing model and documentation areas of concern where improvement is needed.
SK
Sep 27, 2020
We're not too sure about the extension of the firewall. It never shows up in the Hub.
SK
Jun 7, 2020
It needs to be more user-friendly for developers and in general, to ensure compliance.
JR
Aug 26, 2021
We have been having some issues with the latest releases where we are not able to scan our applications with the help of Black Duck.
MC
Aug 6, 2021
Due to the fact that, with our software developer life cycle, we don't need to scan our source code every day or every week. For that reason, we find the cost is too high. We might only actually use it five to ten times a year, which makes it expensive.
Saravanan_Radhakrishnan - PeerSpot reviewer
Mar 5, 2024
The solution must provide more open APIs.