Black Duck vs ShiftLeft comparison

Cancel
You must select at least 2 products to compare!
Synopsys Logo
14,718 views|10,174 comparisons
82% willing to recommend
ShiftLeft Logo
152 views|115 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Black Duck and ShiftLeft based on real PeerSpot user reviews.

Find out what your peers are saying about Synopsys, Snyk, Veracode and others in Software Composition Analysis (SCA).
To learn more, read our detailed Software Composition Analysis (SCA) Report (Updated: May 2024).
771,862 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"I like the fact that the product auto analyzes components.""The solution is very good at scanning and evaluating open source software.""The solution works well on Mac products.""The most valuable feature of Black Duck is the seamless integration to scan our Docker binary files, it provides us all open vulnerabilities, and it ensures a reference point from where it finds the vulnerability is up to date. For example, if there is any new vulnerability found, they are immediately available in the Black Duck. There is no delay in finding the vulnerabilities, they are called out in our code immediately.""Policy management is a valuable feature.""It is able to drill down to the source level.""It highlights what the developers have done, and it shows the impact from an intellectual property point of view.""The installation is very easy."

More Black Duck Pros →

"When it comes to ShiftLeft, the most valuable feature is definitely its ease of use and cost-effectiveness."

More ShiftLeft Pros →

Cons
"The scanner client is limited by the size of software it can handle.""It needs to be more user-friendly for developers and in general, to ensure compliance.""It's still a bit inconsistent. For example, if I scan today, it might not show the same results tomorrow.""It can be cumbersome to use or invalidate open source software because there is a hold time to check requirements or common regulations to ensure compliance.""They are giving a lot of APIs and Python scripts for certain functionalities, but instead of using APIs and Python scripts, they should provide these functionalities through the UI. Users should be able to customize and add more fields through the UI. Users should be able to add more fields and generate reports. Currently, they are not giving flexibility in the UI. They're providing a script that simply generates an Excel file or CSV file. There is no flexibility.""Due to the fact that, with our software developer life cycle, we don't need to scan our source code every day or every week. For that reason, we find the cost is too high. We might only actually use it five to ten times a year, which makes it expensive.""The tool's documentation and support are areas of concern where improvements are required.""I would like to see improvements in Black Duck's reporting capabilities."

More Black Duck Cons →

"Having support from senior management is crucial in making it mandatory for teams to collaborate with the security team throughout the development process."

More ShiftLeft Cons →

Pricing and Cost Advice
  • "Depending on the use case, the cost could range from $10,000 USD to $70,000 USD."
  • "The price is quite high because the behavior of the software during the scan is similar to competing products."
  • "The price is low. It's not an expensive solution."
  • "Black Duck is more suitable if you require a lot of licensing compliance. For smaller organizations, WhiteSource is better because its pricing policies are not really suitable for huge organizations."
  • "It is expensive."
  • "I rate the product's price one on a scale of one to ten, where one is a high price, and ten is a low price."
  • "The pricing is a little high."
  • "The price charged by Black Duck is exorbitant."
  • More Black Duck Pricing and Cost Advice →

    Information Not Available
    report
    Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
    771,862 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We researched Black Duck but ultimately chose WhiteSource when looking for an application security tool. WhiteSource is a software solution that enables agile open source security and license… more »
    Top Answer:The cloud option of the product is always available and a positive aspect of the solution.
    Top Answer:The price charged by Black Duck is exorbitant. For the features provided by the product, I would not want to pay a high price. There are many other products in the market that offer better features… more »
    Top Answer:When it comes to ShiftLeft, the most valuable feature is definitely its ease of use and cost-effectiveness.
    Top Answer:When it comes to areas of improvement for ShiftLeft, I believe it could benefit from greater support from senior management. It's important to have their involvement when it comes to architectural… more »
    Top Answer:I would highly recommend ShiftLeft. It greatly simplifies the job for both security professionals and developers. By identifying and fixing bugs earlier in the development lifecycle, it significantly… more »
    Ranking
    Views
    14,718
    Comparisons
    10,174
    Reviews
    8
    Average Words per Review
    455
    Rating
    7.6
    Views
    152
    Comparisons
    115
    Reviews
    1
    Average Words per Review
    959
    Rating
    10.0
    Comparisons
    Also Known As
    Blackduck Hub, Black Duck Protex, Black Duck Security Checker
    Learn More
    Overview

    Black Duck is a comprehensive solution for managing security, license compliance, and code quality risks that come from the use of open source in applications and containers. Named a leader in software composition analysis (SCA) by Forrester, Black Duck gives you unmatched visibility into third-party code, enabling you to control it across your software supply chain and throughout the application life cycle.

    Shipping secure code is painful and time-consuming – slowing down development teams and AppSec teams alike. ShiftLeft is on a mission to make vulnerabilities history. Our revolutionary Code Property Graph (CPG) enables us to seamlessly insert 10x faster code analysis, prioritized OSS vulnerability findings and real-time security education in one single SaaS platform integrated directly into modern development workflows. Combining our OWASP-benchmark dominating NG-SAST, Intelligent SCA, instant secrets detection, and contextual security education, ShiftLeft CORE code security platform turns every developer into an AppSec expert.

    Sample Customers
    Samsung, Siemens, ScienceLogic, Noser Engineering AG, ClickFox, Dynatrace, CopperLeaf
    Information Not Available
    Top Industries
    REVIEWERS
    Manufacturing Company67%
    Computer Software Company17%
    Financial Services Firm17%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Manufacturing Company15%
    Computer Software Company15%
    Healthcare Company4%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company11%
    Retailer11%
    Legal Firm9%
    Company Size
    REVIEWERS
    Small Business32%
    Large Enterprise68%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise10%
    Large Enterprise75%
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise7%
    Large Enterprise66%
    Buyer's Guide
    Software Composition Analysis (SCA)
    May 2024
    Find out what your peers are saying about Synopsys, Snyk, Veracode and others in Software Composition Analysis (SCA). Updated: May 2024.
    771,862 professionals have used our research since 2012.

    Black Duck is ranked 1st in Software Composition Analysis (SCA) with 19 reviews while ShiftLeft is ranked 11th in Software Composition Analysis (SCA) with 1 review. Black Duck is rated 7.8, while ShiftLeft is rated 10.0. The top reviewer of Black Duck writes "Enables applications to be secure, but it must provide more open APIs". On the other hand, the top reviewer of ShiftLeft writes "Effectively in identify and fix bugs early in the development lifecycle". Black Duck is most compared with Snyk, Fortify Static Code Analyzer, JFrog Xray, Mend.io and Sonatype Repository Firewall, whereas ShiftLeft is most compared with SonarQube and Semgrep Supply Chain.

    See our list of best Software Composition Analysis (SCA) vendors.

    We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.