Black Duck

“Whenever we’ve had a problem, the Coverity SAST support team has had a solution.””

““The ongoing support for Coverity SAST over the past few years has been really good.”

““We’ve also been very appreciative of the support we’ve received from Black Duck,””

““Being able to detect and manage  open source vulnerabilities  early in the  SDLC  helps lower remediation costs,””

““Using Coverity SAST has helped enhance our mandate to ensure code quality and security, as well as to enforce our compliance with SEI-CERT  coding standards for C, C++, and Java , and MISRA standards for C. Most importantly, Coverity SAST allows our developers to work on their essential tasks rather than having to allot time to identifying code defects.””

““We needed a solution to ensure we were tracking and managing open source and commercial components as part of our overall software security initiative.””

“SFR chose Seeker to help prevent code vulnerabilities of web applications and obtain real-time results for quick remediation.”

““When we built our business case for bringing in Black Duck, our internal information security group was a co-sponsor of the effort. This group now has a significantly easier way to determine which artifacts and versions are affected by any security vulnerability and which applications are impacted as a result. This capability did not exist before, so this is huge.””

““We would strongly recommend the Black Duck AST tools to all enterprises, especially those specializing in Embedded Systems where code quality is of paramount importance.””

““Black Duck SCA has solved a number of problems for us,” says Do Van Khac. “After adopting Coverity SAST in 2015 and Black Duck SCA in 2019 we are quite satisfied with Black Duck application security testing. Our evaluations indicate that Black Duck helps our developers be more productive by identifying relevant problems with fewer than 10% false positives or negatives. The tools’ rich reporting capabilities provide us with real-time insight into emerging trends so we can address problems sooner and minimize risk.””

““Black Duck has surpassed our expectations in code scanning and security checking enhancement.” says Do Van Khac. “Coverity SAST and Black Duck SCA provide us with tools to significantly improve our software quality and customer satisfaction as well. Thanks to Coverity SAST, we have achieved compliance with the security issues listed in the OWASP Top 10, demonstrating our capability to address the most critical security risks to web applications.””

““Developing large systems without tools like Coverity is like playing Russian roulette—it just isn’t something you should contemplate. Coverity gives you confidence that you haven’t missed something in your manual review processes, and that equates to an easy decision to make on a simple value-for-money basis.””

““Coverity continues to remain the most useful of the static code analysis tools, with its broad coverage and scanners. The false positive rate remains consistent despite the ever-increasing range of code checks that have been added. It is simply the best tool of its type in the market— still clearly ahead of its competitors,” he continued.”

“We can get results from all the tools we use consolidated into one place, and get the results filtered down to only the information we need.”

“Black Duck and Software Risk Manager have provided the results we’re looking for,”

“We’ve found Software Risk Manager very helpful with static code analysis, since it uses the same SAST engine that powers  Coverity® Static Analysis ,”

“The goal is to automate and embed, so security happens without getting in the way.”

“What we saw was an improvement in how accurately vulnerabilities were identified across both internal and third-party components. That gave us a much clearer picture of what actually needs attention.”

““CEVA can show that we are working according to safety protocols, and we have no issues with customers due to open source usage. We can show code is going through a static analysis tool and [we] therefore [have] better-quality software. And we can show that CEVA is working according to safety protocols.””

““With Coverity SAST and Black Duck SCA solutions, we were able to achieve our safety and quality standard certifications.””

““I would recommend Black Duck SCA. The ease of implementation [is the biggest reason].””

““My favorite feature is the BDSAs. They not only give faster and deeper insights than CVEs, they also flag hidden risks and adjust severity based on real impact,” said Hahna Christian, delivery systems support engineer and security champion at Austrian Post.”

““The integration was very straightforward,” explains Mosler. “The Developer Experience team implemented a template that was then used by the development teams to integrate Black Duck SCA. The template was implemented within two sprints.””

““Black Duck customer service has been outstanding, and support staff is extremely helpful to quickly schedule and escalate business logic assessments as needed.””

““Black Duck security experts have been highly responsive and provide us with high-quality subject matter expertise that helps us remediate and mitigate vulnerabilities accurately and efficiently.””