Black Duck Polaris Platform

Black Duck Software, Inc. is the former Synopsys Software Integrity Group; Synopsys sold it to Clearlake Capital Group and Francisco Partners in October 2024, per the site. The listed address is 800 District Ave., Burlington, Massachusetts, US. It provides application security testing and software composition analysis.

The Polaris Platform delivers SaaS application security, with Coverity (SAST), Black Duck SCA, Continuous Dynamic (DAST), Seeker (IAST), fuzz testing and Software Risk Manager (ASPM). Black Duck Signal adds agentic AI AppSec. The site cites 4,000+ organizations and logos such as Honeywell, Trend Micro and FINRA.

• Coverity Static Analysis: SAST for source code.
• Black Duck SCA: open source component and license risk analysis.
• Continuous Dynamic and Seeker: DAST and IAST runtime testing.
• Defensics fuzz testing for protocols and interfaces.
• Software Risk Manager: ASPM view of application risk.
• Black Duck Signal: agentic AI AppSec.

A Vietnamese outsourcing firm can run SCA and SAST across client projects and deliver license and vulnerability reports. A manufacturer shipping embedded products can use fuzz testing on device interfaces.

• SAST, SCA, DAST, IAST and fuzzing from one vendor.
• Monthly Polaris updates (Sep and Oct 2026 listed on the site).
• Integrations with Jenkins, GitHub Actions, GitLab CI, Azure DevOps and IDEs.
• Support for compliance frameworks such as ISO 27001, SOC 2, PCI DSS and FedRAMP.

SBOM and open source risk requirements are spreading through procurement and regulation. The site features FPT Software, a Vietnamese firm, in a testimonial, indicating relevance to the regional outsourcing sector.

Formerly Synopsys Software Integrity Group (formed 2015 per the site); sold to Clearlake Capital Group and Francisco Partners in Oct 2024. The site cites a Gartner Magic Quadrant for Application Security Testing (2025) Leader position.