Software and Application Security Blog

Agentic AppSec on your infrastructure with Black Duck Signal

Black Duck Signal™ added support for agentic AppSec testing using your own LLM infrastructure in a BYO-LLM configuration. Now you have the flexibility to use Black Duck’s managed LLM endpoints or your own LLM infrastructure.

Read the blog post

Explore Topics

• Agile, CI/CD
• AppSec Best Practices
• AI Code Security
• Build Security into DevOps
• Cloud Security
• Compliance
• Container Security
• CyRC
• DevSecOps
• DAST
• Fuzzing
• IAST
• Mergers and Acquisitions
• Manage Security Risks
• OSS License Compliance
• SAST
• Secure the Software Supply Chain
• Security News & Trends
• Web AppSec

Most recent

PHP2Shell: How to find and fix your exposure with SCA

Steven Zimmerman

Oct 21, 2026 | 5 min read

Polaris release update: Deeper detection, remediation you control, scanning wherever you work

Rachel Zahr

Oct 21, 2026 | 8 min read

Improve collaboration with Defensics multiuser deployment

Mari Puhakka

Oct 12, 2026 | 4 min read

The reality of using LLMs to identify open source risk: Helpful though limited

Phil Odence

Oct 05, 2026 | 5 min read

Polaris release update: Bringing AI security findings, scan governance, and remediation together

Rachel Zahr

Sep 23, 2026 | 8 min read

Top 10 free penetration testing tools

Bonnie Viteri

Sep 23, 2026 | 12 min read

The real and hidden costs of AI security programs

Dom Glavach

Sep 21, 2026 | 6 min read

Agentic AppSec on your infrastructure with Black Duck Signal

Corey Hamilton

Sep 10, 2026 | 6 min read

The vulnerability you didn’t write

Jessy McDermott

Sep 08, 2026 | 5 min read