Black Duck (Vendor): news timeline & CVEs

12 Best SCA Tools Compared (2026): Features & Pricing

A 2026 SCA comparison highlights Snyk, Sonatype, and Socket across three dependency-risk lanes.

GBHackers compared twelve software composition analysis tools, arguing dependency risk spans known CVEs, malicious packages, and license exposure. Snyk leads the developer-platform lane, Sonatype the repository-firewall lane, and Socket malicious-package detection. Mend is highlighted for Renovate-based remediation, Endor Labs for function-level reachability, and FOSSA and Black Duck for license and legal depth.

GBHackers07:33 UTC · 16h agoIndustry1

9 Best IAST Tools Compared (2026): Features & Pricing

A 2026 comparison ranks nine IAST tools, led by Contrast Security, Seeker, Dynatrace, and Datadog.

GBHackers published a research-based 2026 comparison of interactive application security testing tools, reducing twelve listings to nine vendors after acquisitions. Contrast Security is called the best dedicated platform, Black Duck Seeker the best at turning QA traffic into verified findings, and Dynatrace and Datadog the strongest observability-delivered options. Checkmarx, Veracode, OpenText Fortify, HCL AppScan, and Invicti, including Acunetix, are listed as platform or DAST-paired alternatives. The article says it used no lab testing and no paid placement.

GBHackers07:30 UTC · 16h agoTools

12 Best SAST Tools Compared (2026): Features & Pricing

A 2026 comparison ranks twelve SAST tools, with CodeQL, Snyk Code, and SonarQube leading their lanes.

A GBHackers roundup compares twelve static application security testing tools across bundled, developer, enterprise, AI, and embedded categories. GitHub CodeQL is positioned as the baseline for GitHub Advanced Security, while Snyk Code and SonarQube lead developer-focused scanning. Enterprise platforms include Checkmarx, Veracode, OpenText Fortify, and HCL AppScan, with Black Duck Coverity, Qwiet AI, and Parasoft also listed. The scores are research-based editorial ratings, and no lab testing is claimed.

GBHackersupdated 07:26 UTC · 16h agofirst 07:15 UTC · 16h agoTools 3 sources1

Top 10 Best SCA Tools in 2026 [Ranked & Scored]

A 2026 ranking of ten SCA tools places Snyk first, then Sonatype and Endor Labs.

Cyber Security News ranks ten software composition analysis tools, weighting triage quality, coverage, remediation automation, pricing clarity, and SBOM support. Snyk scores 9.1, Sonatype 8.9 for repository-firewall controls, and Endor Labs 8.8 for function-level reachability. Mend, Socket, Black Duck, JFrog Xray, Checkmarx, Veracode, and OWASP Dependency-Check complete the list. The scores are editorial and not based on lab testing.

Cyber Security News07:10 UTC · 16h agoTools

Top 10 Best IAST Tools in 2026 [Ranked & Scored]

A 2026 IAST ranking puts Contrast Security first, then Black Duck Seeker and Datadog.

An editorial 2026 ranking of interactive application security testing tools places Contrast Security first, Black Duck Seeker second, and Datadog, including the Hdiv engine, third. The list collapses ten entries to eight vendors, noting Acunetix is part of Invicti and Hdiv has been inside Datadog since 2022. Invicti, Checkmarx, Veracode, OpenText Fortify, and HCL AppScan complete the ranking. The article says scores weight verification depth and coverage and that no lab testing was performed.

Cyber Security NewsOct 7, 08:10 UTC · 1d agoIndustry1

Top 10 Best SAST Tools in 2026 [Ranked & Scored]

A 2026 editorial ranking puts Snyk Code first among ten SAST tools, ahead of CodeQL and Semgrep.

Cyber Security News published an editorial 2026 ranking of ten SAST tools, weighting fix-rate potential at 30% and precision at 25%, and said the scores were not lab-tested. Snyk Code leads at 9.1; the article names a podium of Snyk, GitHub CodeQL, and Semgrep, while its numbered table places unscored Qwiet AI second and Semgrep third at 8.8. Later scores include Checkmarx 8.7, SonarQube 8.6, Veracode 8.4, Black Duck Coverity 8.2, OpenText Fortify 8.0, and HCL AppScan 7.8, with DeepSource unscored.

Cyber Security NewsOct 6, 07:45 UTC · 2d agoIndustry

Black Duck

Timeline6 articles

Appears with