Reports Library

Discover the latest application security trends and best practices to ensure security in a DevOps environment while maintaining velocity.

Reports

2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

As Generative AI and new regulations like the EU Cyber Resilience Act increase the scale and complexity of managing software supply chain risk, Black Duck arms organizations with the visibility and...

State of DevSecOps 2025

AI is the most transformative challenge facing software development and security. ... AI tools and models are deeply embedded in the daily life of developers, and this presents a huge paradox. ... ...

The State of AI-Powered Software Development

AI adoption alone no longer creates a competitive advantage. ... Many teams report extensive use of AI coding assistants, resulting in notable improvements in velocity and productivity. ... Yet a l...

(2026) OSSRA

Each year, we analyze anonymized findings from commercial codebases audited by the Black Duck Audit Services team, and this provides an unmatched, real-world view of how open source is used—and s...

Software Vulnerability Snapshot

What’s Inside ... The “2024 Software Vulnerability Snapshot” provides valuable insights into the current state of security for web-based applications and systems, and the potential impact of ...

Ponemon Financial Services

Black Duck® uncovers the financial services industry’s current software security posture and its ability to address security-related issues. ... Black Duck Cybersecurity Research Center (CyRC) c...

DZone Trends Report: Enterprise Security

What are the top application security risks? ... What role does security play in software development? ... What are the best practices for securing the software supply chain? ... What about AI-gene...

Customer Value Study

With insights and data provided by over 100 Black Duck customers across several industries, our customer value study demonstrates the transformative impact Black Duck solutions have on the world of...

BSIMM Download

Building Security in Maturity Model (BSIMM) is a data-driven model developed through the analysis of real-world software security initiatives. ... For the 16 th edition of our report, we analyzed t...

DZone Report: SBOM Essentials

A Software Bill of Materials (SBOM) is a critical tool for modern software development and security. ... It provides a detailed inventory of all software components, including open source and third...