Black Duck vs CAST Highlight comparison

Cancel
You must select at least 2 products to compare!
Synopsys Logo
14,882 views|10,384 comparisons
85% willing to recommend
CAST Logo
452 views|323 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Black Duck and CAST Highlight based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Black Duck vs. CAST Highlight Report (Updated: March 2024).
767,667 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The solution works well on Mac products.""The solution is stable.""The installation is very easy.""The UI is the solution's most valuable feature since it allows for easy pipeline integration.""The stability is okay.""The knowledge base and the management system are the most valuable features of Black Duck Hub. It has a very helpful management environment. They offer an editor where we can check the discovered license, which is retrieved from their knowledge base. They have a huge knowledge base build over the years. It gives you some possibilities, such as this license with possibility A could cause a vulnerability issue or a potential breach.""It highlights what the developers have done, and it shows the impact from an intellectual property point of view.""Policy management is a valuable feature."

More Black Duck Pros →

"It offers good performance.""The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with.""The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages.""CAST Highlight is easy to use and has a good dashboard.""The most valuable features of CAST Highlight are automation and speed."

More CAST Highlight Pros →

Cons
"The tool needs to improve its pricing. Its configuration is complex and can be improved.""Black Duck can improve the time it takes for a scan. Most of the time it's not ideal when integrated with the live DevSecOps pipeline. We have to create a separate job to scan the library because it takes a couple of hours to scan all those libraries. The scanning could be faster.""It is a cloud-only solution. In many cases, companies like to evaluate the software, but they're very reluctant to give you the software. It would be great if they could offer an on-prem component that could be used to scan the code and then upload the discovery results to the cloud and get all the information from there, but there is no such possibility. You have to upload the code to the Black Duck cloud system. Of course, they have a strong legal department, and they offer some configuration, but it is never enough. You have to give the code, which is a drawback. In modern designs like Snyk or FOSSA, you don't need to give the code. It requires more native integration with Coverity because they go together technically. You need both Coverity and Black Duck Hub. It would be really helpful for companies working in this space to get a combined offer from the same company. They should provide an option to buy Coverity for an additional fee. Coverity combined with Black Duck Hub will provide a one-step analysis to get everything you need and a unified report. It would be really great to be able to connect Black Duck Hub with Coverity unified reports.""The scanner client is limited by the size of software it can handle.""The solution's pricing model and documentation areas of concern where improvement is needed.""Due to the fact that, with our software developer life cycle, we don't need to scan our source code every day or every week. For that reason, we find the cost is too high. We might only actually use it five to ten times a year, which makes it expensive.""They are giving a lot of APIs and Python scripts for certain functionalities, but instead of using APIs and Python scripts, they should provide these functionalities through the UI. Users should be able to customize and add more fields through the UI. Users should be able to add more fields and generate reports. Currently, they are not giving flexibility in the UI. They're providing a script that simply generates an Excel file or CSV file. There is no flexibility.""The initial setup could be simplified. It was somewhat complex."

More Black Duck Cons →

"There's a bit of a learning curve at the outset.""The ease of configuration and customization could be improved in CAST Highlight.""The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user.""Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time.""CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

More CAST Highlight Cons →

Pricing and Cost Advice
  • "Depending on the use case, the cost could range from $10,000 USD to $70,000 USD."
  • "The price is quite high because the behavior of the software during the scan is similar to competing products."
  • "The price is low. It's not an expensive solution."
  • "Black Duck is more suitable if you require a lot of licensing compliance. For smaller organizations, WhiteSource is better because its pricing policies are not really suitable for huge organizations."
  • "It is expensive."
  • "I rate the product's price one on a scale of one to ten, where one is a high price, and ten is a low price."
  • "The pricing is a little high."
  • More Black Duck Pricing and Cost Advice →

  • "CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."
  • "It is a pretty costly tool. A lot of customers are resistant to using it."
  • "Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."
  • "CAST Highlight is an expensive solution."
  • More CAST Highlight Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
    767,667 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We researched Black Duck but ultimately chose WhiteSource when looking for an application security tool. WhiteSource is a software solution that enables agile open source security and license… more »
    Top Answer:The product enables other applications to be secure.
    Top Answer:The pricing is a little high. I rate the pricing a seven out of ten. The average price of the product is close to $100.
    Top Answer:The most valuable features of CAST Highlight are automation and speed.
    Top Answer:CAST Highlight is an expensive solution. On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight or nine out of ten.
    Top Answer:The ease of configuration and customization could be improved in CAST Highlight.
    Ranking
    Views
    14,882
    Comparisons
    10,384
    Reviews
    7
    Average Words per Review
    373
    Rating
    8.1
    Views
    452
    Comparisons
    323
    Reviews
    5
    Average Words per Review
    567
    Rating
    7.8
    Comparisons
    Snyk logo
    Compared 23% of the time.
    JFrog Xray logo
    Compared 11% of the time.
    Mend.io logo
    Compared 9% of the time.
    ShiftLeft logo
    Compared 0% of the time.
    SonarQube logo
    Compared 70% of the time.
    Checkmarx One logo
    Compared 5% of the time.
    Snyk logo
    Compared 5% of the time.
    Veracode logo
    Compared 5% of the time.
    GitLab logo
    Compared 3% of the time.
    Also Known As
    Blackduck Hub, Black Duck Protex, Black Duck Security Checker
    Learn More
    Overview

    Black Duck is a comprehensive solution for managing security, license compliance, and code quality risks that come from the use of open source in applications and containers. Named a leader in software composition analysis (SCA) by Forrester, Black Duck gives you unmatched visibility into third-party code, enabling you to control it across your software supply chain and throughout the application life cycle.

    CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

    CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

    Sample Customers
    Samsung, Siemens, ScienceLogic, Noser Engineering AG, ClickFox, Dynatrace, CopperLeaf
    Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF
    Top Industries
    REVIEWERS
    Manufacturing Company60%
    Computer Software Company20%
    Financial Services Firm20%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Manufacturing Company15%
    Computer Software Company15%
    Healthcare Company4%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company17%
    Insurance Company10%
    Manufacturing Company9%
    Company Size
    REVIEWERS
    Small Business29%
    Large Enterprise71%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise10%
    Large Enterprise75%
    VISITORS READING REVIEWS
    Small Business13%
    Midsize Enterprise14%
    Large Enterprise73%
    Buyer's Guide
    Black Duck vs. CAST Highlight
    March 2024
    Find out what your peers are saying about Black Duck vs. CAST Highlight and other solutions. Updated: March 2024.
    767,667 professionals have used our research since 2012.

    Black Duck is ranked 1st in Software Composition Analysis (SCA) with 16 reviews while CAST Highlight is ranked 10th in Software Composition Analysis (SCA) with 5 reviews. Black Duck is rated 7.8, while CAST Highlight is rated 7.8. The top reviewer of Black Duck writes "Enables applications to be secure, but it must provide more open APIs". On the other hand, the top reviewer of CAST Highlight writes "Easy to set up with optimized and automated insights". Black Duck is most compared with Snyk, Fortify Static Code Analyzer, JFrog Xray, Mend.io and ShiftLeft, whereas CAST Highlight is most compared with SonarQube, Checkmarx One, Snyk, Veracode and GitLab. See our Black Duck vs. CAST Highlight report.

    See our list of best Software Composition Analysis (SCA) vendors.

    We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.