# agentsite-static-version=67edf209-9e72-4f80-8d57-7f9403cde0ac # blackduck.com > AI-optimized mirror of blackduck.com containing 250 pages totalling 127,416 words of clean markdown content, structured data, and semantic HTML. Original source: https://blackduck.com. Last updated: 2026-10-22T09:07:15.933Z. Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG). ## Homepage - [Application Security Testing | Software Composition Analysis & Open Source Security | SAST/DAST/SCA | Black Duck](/content/site-root.html): Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations. (952 words) ## Articles & Blog Posts - [EU Cyber Resilience Act compliance checklist for 2026 readiness | Black Duck](/content/resources/ebooks/eu-cyber-resilience-act-compliance-checklist-html.html): Prepare for EU CRA mandatory reporting requirements with our comprehensive checklist covering vulnerability monitoring, SBOM generation, and compliance workflows for manufacturers, distributors, and importers. (794 words) - [[eBook] A Guide to CISA's Six Types of SBOMs | Black Duck](/content/resources/ebooks/cisa-sboms-guide-html.html): Read about the benefits and limitations for each of the six CISA-defined SBOMs to help you determine which type is right for you. (114 words) - [Datasheet: Secure Software Development Framework (SSDF) | Black Duck](/content/resources/datasheets/ssdf-readiness-assessment-html.html) (59 words) - [AI Coding Assistants: Your Seven-Layer Security Checklist | Black Duck](/content/resources/ebooks/ai-coding-assistants-security-checklist-html.html) (1,082 words) - [Safe Coding Practices for AI-Generated and Open Source Code | Black Duck](/content/resources/ebooks/safe-coding-practices-for-ai-open-source-html.html): Download the Ultimate Checklist: Safe Coding Practices for AI-Generated and Open Source Code to mitigate security risks and ensure software reliability. (124 words) - [Black Duck Website Privacy Policy](/content/company/legal/privacy-policy-html.html): Black Duck is committed to protecting your online privacy on our website. The privacy practices described in this privacy policy apply to blackduck.com and to all of our websites and wholly owned subsidiary websites (3,241 words) - [Datasheet: Secrets Scanning | Black Duck](/content/resources/datasheets/secrets-detection-html.html) (64 words) - [Vulnerability Disclosure Policy](/content/company/legal/vulnerability-disclosure-policy-html.html) (1,251 words) - [導入およびデプロイメントのサポート – お問い合わせ | ブラック・ダック](/content/ja-jp/customer-success/implementation-deployment-info-html.html): アプリケーション・セキュリティ・テスト向けのブラックダックのサービスが、ニーズの変化に応じてどのようにテスト能力を最適化できるかについてご相談ください。 (7 words) - [DAST Archives | Black Duck](/content/blog/category-dast-html.html): dast (102 words) - [Navigating Software Supply Chain Risk | Black Duck](/content/resources/analyst-reports/navigating-software-supply-chain-risk-html.html) (181 words) - [Secure Your Software Supply Chain with Key Regulations and SCA | Black Duck](/content/resources/ebooks/software-supply-chain-regulations-and-sca-html.html): Explore key software supply chain regulations and how SCA tools like Black Duck can help organizations comply and improve their security posture. (143 words) - [Open Source Security and Risk Analysis Report | Black Duck](/content/resources/analyst-reports/open-source-security-risk-analysis-html.html) (12,127 words) - [Legal | Black Duck](/content/company/legal-html.html) (127 words) - [solutions/index.html](/content/solutions/index.html) (386 words) - [ja-jp/solutions/index.html](/content/ja-jp/solutions/index.html) (58 words) - [Black Duck vs. Snyk, Checkmarx & Veracode | AppSec Comparison](/content/compare-html.html): Compare Black Duck vs. Snyk, Checkmarx, and Veracode across SAST, SCA, SBOM, and license compliance. See why enterprises choose Black Duck for accuracy, scale, and supply chain security. (311 words) - [Office Locations | Black Duck](/content/company/locations-html.html) (168 words) - [Black Duck Assist: AI Code Security Assistant | Black Duck](/content/ai-code-security-assistant-html.html): Black Duck Assist is an AI code security assistant that provides AI-powered insights to help teams build and secure their AI-generated code faster. (320 words) - [Open Source Knowledge Base - Black Duck | Black Duck](/content/software-composition-analysis-tools/knowledgebase-html.html): Black Duck's Open Source Knowledge Base is the most comprehensive database of open source project, license, and security information. Learn more. (540 words) - [Agentic AI AppSec Expert Opinion | Bonnie Viteri](/content/blog/authors/bonnie-viteri-html.html): Bonnie Viteri is a technical product and security leader with over 15 years of experience applying agentic AI into into application security and developer workflows to improve developer productivity and reduce security risks. (86 words) - [How to build a Mythos-ready AppSec program | Black Duck](/content/resources/white-papers/modernize-appsec-for-machine-speed-exploits-html.html): Claude Mythos reduced the time between vulnerability discovery and exploitation from weeks to hours. Read the executive brief to learn what’s changed and how to close the gap. (183 words) - [General Manager of Black Duck On-Demand | Phil Odence](/content/blog/authors/phil-odence-html.html): Phil Odence, General Manager of Black Duck Audit Services, specializes in software composition, security, and quality for M&A transactions. (248 words) - [無料トライアルのお申込み](/content/ja-jp/trial-html.html) (34 words) - [Mari Puhakka | Black Duck](/content/blog/authors/mari-puhakka-html.html) (71 words) - [Demonstrating the value of Black Duck Security Advisories | Black Duck](/content/resources/ebooks/black-duck-security-advisories-html.html): This report demonstrates how Black Duck Security Advisories can support users to effectively priorities security risks in their organizations. (116 words) - [Premium and Designated Support Services - AppSec as a Service | Black Duck](/content/customer-success/premium-html.html): Black Duck Premium & Designated Support Services covers all stages of your AppSec journey. Compare our AppSec support programs to find the right one for you. (486 words) - [ja-jp/blog/authors/black-duck-editorial-team-html.html](/content/ja-jp/blog/authors/black-duck-editorial-team-html.html) (90 words) - [Meeting ISO 26262 Guidelines | Black Duck](/content/resources/white-papers/iso26262-guidelines-html.html): Download this free Black Duck guide on how to meet ISO 26262 software standards for vehicle functional safety at the software level. (4,182 words) - [BSIMM Assessment Services: Software Security Benchmarking | Black Duck](/content/services/security-program/bsimm-maturity-model-html.html): Benchmark your AppSec program with BSIMM assessment services from Black Duck. Get data-driven insights from 100+ organizations, identify security gaps, and build a customized Maturity Action Plan (MAP) to advance your software security posture. Trusted by industry leaders worldwide. (335 words) - [What Is the Software Development Life Cycle (SDLC) and How Does It Work? | Black Duck](/content/glossary/what-is-sdlc-html.html): How was the SDLC created? In the 1950s and 1960s, computer science progressed rapidly. This swift evolution sparked the beginnings of a production framework that eventually grew into the SDLC we know today. Prior to the 1950s, computing was not elaborate enough to necessitate a detailed approach like the SDLC. As the complexity and scale […] (1,607 words) - [[AppSec Case Study] Simplifying AppSec results with Software Risk Manager | Black Duck](/content/resources/case-studies/cgi-html.html) (955 words) - [Seekerトライアル | Black Duck](/content/ja-jp/dast/demo-2-html.html) (206 words) - [BSIMM16 Report | Black Duck](/content/resources/analyst-reports/bsimm-html.html) (1,394 words) - [Maturity Action Planning (MAP) for Software Security Initiatives | Black Duck](/content/services/security-program/maturity-action-plan-html.html): A Black Duck Maturity Action Plan is a detailed roadmap with a prioritized list of actionable recommendations to elevate your software security program. (687 words) - [Mergers & Acquisitions | Black Duck](/content/solutions/mergers-acquisitions-html.html) (649 words) - [ソフトウェア・セキュリティ 関連資料 | ブラック・ダック](/content/ja-jp/resources-html.html): ソフトウェアの品質やセキュリティ向上に関する事例、技術情報、各種レポートなど、ダウンロードしてお役立てください。 (18 words) - [Implementation and Deployment Support - Contact Us | Black Duck](/content/customer-success/implementation-deployment-info/index.html): Get a free consultation on how Black Duck Managed Services for Application Security Testing can help you optimize your testing capacity as needs change. (83 words) - [SRM Demo | Black Duck](/content/software-risk-manager/demo-html.html) (109 words) - [static-analysis-tools-sast/coverity/demo/index.html](/content/static-analysis-tools-sast/coverity/demo/index.html) (193 words) - [static-analysis-tools-sast/coverity/get-pricing/index.html](/content/static-analysis-tools-sast/coverity/get-pricing/index.html) (345 words) - [Datasheet: Black Duck Open Source Audits | Black Duck](/content/resources/datasheets/open-source-audits-html.html) (72 words) - [Datasheet: Black Duck Audits |Black Duck](/content/resources/datasheets/black-duck-audits-html.html) (46 words) - [Premium & Designated Support - Contact Us | Black Duck](/content/customer-success/support-contact-html.html) (82 words) - [Rachel Zahr](/content/blog/authors/rachel-zahr-html.html) (156 words) - [Application Security Services | Black Duck](/content/services-html.html) (213 words) - [Legal Specialists | Black Duck](/content/services/open-source-software-audit/certified-lawyers-html.html): Black Duck is pleased to provide this directory of legal professionals who have been certified as Black Duck Legal Specialists. (5,379 words) - [[eBook] Taking a Comprehensive Approach to Software Audits in M&A Transactions | Black Duck](/content/resources/ebooks/software-audits-in-mergers-acquisitions-html.html): Download the Black Duck ebook on "Taking a Comprehensive Approach to Software Audits in Merger and Acquisition Transactions", which includes everything a buyer and seller need to consider when it comes to software due diligence. (207 words) - [Application Security Resources | Black Duck](/content/resources-html.html): Resources for all you need to stay up-to-date on the latest in Application Security from our team: analyst reports, case studies, eBooks, industry best practices, podcasts, videos, webinars and whitepapers. Learn more at Blackduck.com. (160 words) - [First Line of Defense: Developer Security Tools in the IDE | Black Duck](/content/resources/white-papers/developer-security-tools-in-ide-html.html) (156 words) - [Datasheet: Premium and Dedicated Support Services | Black Duck](/content/resources/datasheets/premium-dedicated-support-services-html.html) (67 words) - [Black Duckソフトウェア・コンポジション解析(SCA) | Black Duck](/content/ja-jp/software-composition-analysis-tools/black-duck-sca-html.html): Black Duckソフトウェア・コンポジション解析(SCA)は、オープンソース・ソフトウェアのセキュリティ、品質、ライセンス・コンプライアンス上のリスクを管理するソリューションです。Black Duckのサイトで詳細をご覧ください。 (232 words) - [Coverity SAST | ブラック・ダックによる静的アプリケーション・セキュリティ・テスト](/content/ja-jp/static-analysis-tools-sast/coverity-html.html): Coverityは、エンタープライズ・コードベースの正確でスケーラブルな静的解析(SAST)を提供します。複雑なコードベースの深く正確な分析を実現し、C、C++、Java、C# などの言語で重要な脆弱性やコンプライアンス・リスクを検出します。DevSecOps パイプラインにシームレスに統合されています。 (82 words) - [SFR | Black Duck](/content/resources/case-studies/sfr-html.html) (631 words) - [Software Supply Chain Security and Compliance Expert Opinion | Steven Zimmerman](/content/blog/authors/steven-zimmerman-html.html): Steven Zimmerman, product marketing manager at Black Duck, shares his expertise in helping enterprises build AppSec strategies that ensure continuous delivery, establish consistent risk visibility, and support regulatory compliance requirements like the EU CRA. (59 words) - [Software Quality and Security Standards Compliance | Black Duck](/content/ja-jp/solutions/compliance-html.html) (80 words) - [ja-jp/contact-sales/index.html](/content/ja-jp/contact-sales/index.html) (56 words) - [[レポート] 世界のDevSecOps の現状 2025 | Black Duck](/content/ja-jp/resources/analyst-reports/state-of-devsecops-html.html): 「世界のDevSecOps の現状 2025」レポートは、DevSecOpsの成熟度が異なる段階にある組織のさまざまな特徴を調査しています。AIは、ソフトウェア開発とセキュリティにおいて、最も大きく変革をもたらす課題となっています。 (16 words) - [Black Duck Customer Success | Black Duckソフトウェア・インテグリティ・グループのカスタマー・サービス | ブラック・ダック](/content/ja-jp/customer-success-html.html) (51 words) - [contextai | Black Duck](/content/ja-jp/contextai-html.html) (49 words) - [OWASP Mobile Top 10 - Coverity SAST Supported Security Standards | Black Duck](/content/static-analysis-tools-sast/owasp-mobile-top10-html.html): Get the Open Web Application Security Project (OWASP) Mobile top 10 list for Java, Kotlin, Objective C/C++, Swift and more. See how each is supported by Black Duck. (738 words) - [Improving Fuzz Testing of Infotainment Systems and Telematics Units | Black Duck](/content/resources/white-papers/fuzz-testing-infotainment-systems-html.html) (141 words) - [エージェント型AI AppSecプラットフォーム | リアルタイム・コード・セキュリティ | Black Duck](/content/ja-jp/signal-ai-appsec-html.html): Signalは、20年以上にわたって蓄積したセキュリティの専門知識とエージェント型AI主導の解析を組み合わせて、開発者が作成したコードとAIが生成したコードに内在するセキュリティ上の不具合を自動的に検出・修正します。 (37 words) - [EU Cyber Resilience Act | Black Duck](/content/ja-jp/solutions/eu-cyber-resilience-act-compliance-html.html) (87 words) - [[eBook] Build and Maintain Actionable SBOMs | Black Duck](/content/resources/ebooks/actionable-software-bill-of-materials-html.html): Learn about the key considerations for building, maintaining, and using a software bill of materials. (1,954 words) - [Public Sector | Black Duck](/content/ja-jp/solutions/government-html.html) (80 words) - [Get Pricing - Seeker IAST | Black Duck](/content/interactive-application-security-testing/get-pricing-html.html) (151 words) - [アプリケーション・セキュリティ・ブログ | Black Duck](/content/ja-jp/blog-html.html): Get expert insights from the Black Duck software and application security blog. Explore topics from DevOps security, software news, analysis, intel and more. (631 words) - [blog/index.html](/content/blog/index.html) (263 words) - [ソフトウェア・コンポジション解析(SCA)ツールとセキュリティ | Black Duck](/content/ja-jp/software-composition-analysis-tools-html.html): Black Duckのソフトウェア・コンポジション解析(SCA)は、ソフトウェア・サプライチェーンのセキュリティを確保し、依存関係を特定します。SCAツールでSCAのセキュリティを管理します。 (76 words) - [Container Security | Black Duck](/content/ja-jp/solutions/container-security-html.html) (49 words) - [ja-jp/platform/index.html](/content/ja-jp/platform/index.html) (54 words) - [動的アプリケーション‧セキュリティ‧テスト(DAST)ツールおよびソリューション| ブラック‧ダック](/content/ja-jp/dast-html.html): ブラック・ダックのDASTソリューションは、自動化された迅速な保護を提供します。動的アプリケーション・セキュリティ・テスト・ツールでセキュアなシステムを実現しましょう。 (60 words) - [Seeker インタラクティブ・アプリケーション・セキュリティ・テスト | ブラック・ダック](/content/ja-jp/interactive-application-security-testing-html.html): アクティブ検証、機密データ追跡、シームレスなDevOps統合により、ブラック・ダックのSeeker®がWebベースのアプリケーション・セキュリティにどのような革命をもたらすかをご覧ください。 (93 words) - [ソフトウェア監査サービス | セキュリティおよびデューデリジェンス | ブラックダック](/content/ja-jp/services/open-source-software-audit-html.html): M&A とセキュリティコンプライアンスのための包括的なソフトウェア監査。オープンソース・リスク、SAST、コード品質およびペンテストにおける20年以上の専門知識を有しています。すぐに正確な結果を提供。 (97 words) - [ブラック・ダックについて | ブラック・ダック](/content/ja-jp/company-html.html): ブラック・ダックだけが、規制対象となるAI活用環境でソフトウェアの信頼性を実現するTrue Scale Application Securityを提供します。 (50 words) - [Continuous Dynamic 動的解析(DAST)|ブラック・ダック](/content/ja-jp/dast/continuous-dynamic-html.html): Continuous Dynamicは、Webアプリケーションの脆弱性を迅速かつ容易に検出する動的アプリケーション・セキュリティ・テスト・ソリューションです。詳しくはお問い合わせください。 (89 words) - [Solutions | Black Duck](/content/ja-jp/solutions-html.html): Get solutions to your software security and application security security challenges by industry, security threat or by stage of your journey. (52 words) - [Defensicsファジング・テスト・ツールおよびサービス | ブラック・ダック](/content/ja-jp/fuzz-testing-html.html): ファジング・テストは、不正な形式の入力でシステムを攻撃し、危険な未知の脆弱性を誘発する誤用のケースを検出します。 (66 words) - [SAST - 静的コード解析ツール | Black Duck](/content/ja-jp/static-analysis-tools-sast-html.html): Black Duckの静的アプリケーション・セキュリティ・テスト(SAST)を使用して、セキュリティと品質の問題を特定する。静的コード解析ツールのスケジュール設定、自動化、統合を行います。 (83 words) - [Financial Services | Black Duck](/content/ja-jp/solutions/financial-services-html.html) (59 words) - [Senior Software Security Technical Writer | Fred Bals](/content/blog/authors/fred-bals-html.html): Fred is a senior technical writer at Black Duck. He is a Mini Cooper fanboy and has worked for both Google and Bob Dylan at various points in his career. (136 words) - [Software Due Diligence for M&A | Black Duck Audit Services](/content/ja-jp/solutions/mergers-and-acquisitions-html.html): Black Duck Audit Services delivers expert software due diligence for M&A —uncovering open source, security, and code quality risks before you close the deal. (57 words) - [AppSecの導入サービスとデプロイメント・サポート | ブラック・ダック](/content/ja-jp/customer-success/implementation-html.html): Black Duck の導入サービスとデプロイメント・サポートを利用して、アプリケーション・テスト・ツールを最適に活用、管理、導入する方法をご確認ください。 (58 words) - [Medical Devices | Black Duck](/content/ja-jp/solutions/healthcare-html.html) (53 words) - [アプリケーション・セキュリティ態勢管理とセキュリティ・リスクの標準化 | ブラック・ダック](/content/ja-jp/software-risk-manager-html.html): Software Risk Managerは、セキュリティ・チームと開発チームがエンタープライズ規模でアプリケーション・セキュリティ・プログラムを管理するためのアプリケーション・セキュリティ態勢管理(ASPM)ソリューションです。 (48 words) - [CWE Top 25 Supported by Static Code Analysis (SAST) | Black Duck](/content/static-analysis-tools-sast/cwe-top25-html.html): Get a snapshot of the CWE Top 25, supported by Black Duck Static Code Analysis (SAST), in our table listing the most common and impactful software weaknesses. (259 words) - [ソフトウェア・サプライ・チェーンのセキュリティ | Black Duck](/content/ja-jp/solutions/software-supply-chain-security-html.html) (54 words) - [[White Paper] Securing 5G and IoT with Fuzzing | Black Duck](/content/resources/white-papers/securing-5g-iot-with-fuzzing-html.html) (212 words) - [ソフトウェア・セキュリティ・リソース | Black Duck](/content/ja-jp/resources/case-studies-html.html) (73 words) - [Datasheet: PCI DSS Compliance with Coverity | Black Duck](/content/resources/datasheets/coverity-pci-dss-html.html) (66 words) - [[AppSec Case Study] Delivering Secure Payment Solutions With Seeker IAST | Black Duck](/content/resources/case-studies/parkeon-html.html): Read the case study to see how Parkeon is delivering secure payment solutions with Seeker® Interactive Analysis (IAST). (821 words) - [DevSecOps | Black Duck](/content/ja-jp/solutions/devsecops-html.html) (53 words) - [自動車のアプリケーション・セキュリティ | ブラック・ダック](/content/ja-jp/solutions/automotive-html.html): インターネット接続機能を有する自動車の増加に伴い、車載アプリケーションがハッカーの標的になりやすくなっています。セキュアなソフトウェアを一から開発するお客様をシノプシスが支援します。 (47 words) - [Get Pricing - Coverity SAST | Black Duck](/content/static-analysis-tools-sast/coverity/get-pricing-html.html): Sign up to get a no-obligation quote for Coverity SAST pricing. Fully customized, fix critical defects and reduce to cost of software failures with Black Duck. (158 words) - [Static Analysis Programming Languages, Framework & Library | Black Duck](/content/static-analysis-tools-sast/languages-and-frameworks-html.html): Black Duck supports programming languages, frameworks, libraries, and integrations. Get a list of the most popular technologies used by our static analysis tool. (405 words) - [APIセキュリティ・テスト | Black Duck](/content/ja-jp/solutions/api-security-testing-html.html) (54 words) - [2025年 ガートナー アプリケーション・セキュリティ・テスト分野のマジック・クアドラント|Black Duck](/content/ja-jp/resources/analyst-reports/gartner-magic-quadrant-appsec-html.html): シノプシスは、2025年 ガートナー アプリケーション・セキュリティ・テスト分野のマジック・クアドラントで、8年連続リーダーの1社として位置付けられています。 (187 words) - [Get Pricing - Defensics Fuzz Testing | Black Duck](/content/fuzz-testing/get-pricing-html.html) (88 words) - [Thales Alenia Space | Black Duck](/content/resources/case-studies/thales-alenia-space-html.html) (945 words) - [Software Composition Analysis Demo | Black Duck](/content/software-composition-analysis-tools/black-duck-sca/demo-html.html): Sign up to get a demo of the Black Duck Software Composition Analysis tool. Learn why over 4,000 organizations worldwide trust Black Duck. Request a demo today. (209 words) - [Code Sight IDE Plugin: Real-Time Application Security Testing (SAST & SCA) | Black Duck](/content/ja-jp/code-sight-html.html): Code Sight: the IDE plugin that integrates static application security testing (SAST) and software composition analysis (SCA) to identify security risks in code, open source dependencies, and infrastructure-as-code. Find and fix issues as you code. (55 words) - [Open Source Security & License Compliance | Black Duck](/content/ja-jp/solutions/open-source-security-html.html) (82 words) - [Embedded and ISV Software | Black Duck](/content/ja-jp/solutions/embedded-software-security-html.html) (48 words) - [Get Pricing - Continuous Dynamic | Black Duck](/content/dast/get-pricing-html.html) (252 words) - [Securing Digital Apps With Dast | Black Duck](/content/resources/case-studies/securing-digital-apps-with-dast-html.html) (873 words) - [eBooks | Black Duck](/content/ja-jp/resources/ebooks-html.html): ソフトウェアの品質やセキュリティを向上させるためのPDF等の読み物や関連資料をダウンロードできます。 (30 words) - [MEGA International - Application Security Customer Case Study | Black Duck](/content/resources/case-studies/mega-international-html.html) (895 words) - [What Is the OWASP Top 10 and How Does It Work? | Black Duck](/content/glossary/what-is-owasp-top-10-html.html): How is the OWASP Top 10 list used and why is it important? The OWASP has maintained its Top 10 list since 2003, updating it every two or three years in accordance with advancements and changes in the AppSec market. The list’s importance lies in the actionable information it provides in serving as a checklist […] (1,119 words) - [レポート | Black Duck](/content/ja-jp/resources/analyst-reports-html.html) (102 words) - [Cybersecurity Research Center(CyRC) | Black Duck](/content/ja-jp/resources/cybersecurity-research-center-html.html): ソフトウェアの脆弱性の特定、重大度、エクスプロイト、緩和策、防御策などに関する情報へのアクセスを加速するBlack Duck Cybersecurity Research Centerについての詳細は、こちらをご覧ください。 (23 words) - [用語集 | Black Duck](/content/ja-jp/glossary-html.html) (68 words) - [Scaling AppSec Program in Financial Services - Customer Case Study | Black Duck](/content/resources/case-studies/scaling-appsec-program-html.html) (1,046 words) - [Datasheet: Coverity Static Analysis | Black Duck](/content/resources/datasheets/coverity-static-analysis-html.html) (852 words) - [Coverity Demo | Black Duck](/content/static-analysis-tools-sast/coverity/demo-html.html) (194 words) - [アプリケーション・セキュリティ・コンサルティング・サービス | Black Duck](/content/ja-jp/services/security-program-html.html): アーキテクチャや設計、CI/CD、IoTなどの熟練した専門家による特化したコンサルティングにより固有のソフトウェア・セキュリティおよび品質のニーズに対応します。詳細については、Blackduck.comをご覧ください。 (27 words) - [Application Security Testing | Black Duck](/content/ja-jp/solutions/application-security-testing-html.html): Black Duck delivers comprehensive application security testing (AST) through industry-leading static (SAST), Dynamic (DAST), interactive (IAST), and software composition analysis (SCA), with integration into CI/CD pipelines. (36 words) - [Fuzzing test suites and protocols | Black Duck](/content/fuzz-testing/defensics-html.html): See the RFC specification coverage, fuzz test tool features and tool-specific information for over 100 test suites with Black Duck Defensics Fuzzing. (300 words) - [Black Duck SCA Get Pricing | Black Duck](/content/software-composition-analysis-tools/black-duck-sca/get-pricing-html.html) (154 words) - [What Is CI/CD and How Does It Work? | Black Duck](/content/glossary/what-is-cicd-html.html): Why is CI/CD important? CI/CD allows organizations to ship software quickly and efficiently. CI/CD facilitates an effective process for getting products to market faster than ever before, continuously delivering code into production, and ensuring an ongoing flow of new features and bug fixes via the most efficient delivery method.  What is the difference between CI […] (812 words) - [AI-Generated Code | Black Duck](/content/ja-jp/solutions/artificial-intelligence-software-development-html.html): Secure your AI-generated code with Black Duck. Confidently adopt AI code assistance by detecting vulnerabilities and hallucinated dependencies, and enforce security in AI-powered development. (38 words) - [What Is The GDPR (General Data Protection Rule) and How Does It Work? | Black Duck](/content/glossary/what-is-gdpr-html.html): Learn more about the General Data Protection Rule (GDPR) including the types of data protected by it, businesses affected by it, and how to meet GDPR compliance. Find out at Blackduck.com. (853 words) - [Integrate AppSec at the Speed of AI | Black Duck](/content/ja-jp/solutions/enterprise-application-security-risk-management-html.html) (79 words) - [Forrester Wave Software Composition Analysis | Black Duck](/content/resources/analyst-reports/forrester-wave-software-composition-analysis-html.html) (355 words) - [Secure AI-generated code at scale with Static Analysis | Black Duck](/content/resources/case-studies/securing-ai-generated-code-static-analysis-html.html): Learn how a leading asset manager used static analysis to identify vulnerabilities in AI-generated code, reduce MTTR, and support compliance. (587 words) - [MISRA C Coding Standards & Guidelines | Black Duck](/content/static-analysis-tools-sast/misra-html.html): See how Black Duck Static Analysis covers MISRA coding standards. Get the complete list of MISRA C Guidelines for all supported rules. (185 words) - [Continuous Dynamic as a Service | Professional Services | Black Duck](/content/dast/services-html.html) (287 words) - [Signal Demo | Black Duck](/content/signal-ai-appsec/demo-html.html) (137 words) - [What Is PCI DSS Compliance and How Does It Work? | Black Duck](/content/glossary/what-is-pci-dss-compliance-html.html): Learn about PCI DSS compliance, the problems it is intended to solve, how it works to protect cardholder and the consequence of non compliance. (732 words) - [Open Source Scanning Software | Black Duck](/content/software-composition-analysis-tools/open-source-scanning-html.html): Black Duck open source scanning software offers multifactor open source scanning to provide a complete view of open source in your apps and containers. (407 words) - [ブラック・ダック ソフトウェア・セキュリティ・ソリューション概要](/content/ja-jp/resources/datasheets/black-duck-product-services-portfolio-html.html) (7 words) - [Black Duck Binary Analysis | Black Duck](/content/software-composition-analysis-tools/binary-analysis-html.html): Get visibility into open source and third-party dependencies with Black Duck Binary Analysis. Manage security and license risks, and more. (357 words) - [ソフトウェアの品質とセキュリティ、データシート| ブラック・ダック | Black Duck](/content/ja-jp/resources/datasheets-html.html): ソフトウェアの品質とセキュリティ向上のためのツールやサービスに関する資料をダウンロードできます。 (85 words) - [M&A Open Source Audits | Black Duck](/content/resources/white-papers/ma-open-source-audits-html.html): Learn how an open source audit can benefit your organization and help you understand the composition of your code so you can reduce your risk. (196 words) - [Open Source Vulnerability Database Reporting & Monitoring | Black Duck](/content/software-composition-analysis-tools/vulnerability-reporting-html.html): Get a full view of open source vulnerabilities with Black Duck's open source vulnerability database. Black Duck protects before, during, and after deployment. (243 words) - [お問い合わせ | ブラック・ダック](/content/ja-jp/contact-sales-html.html): ブラック・ダックへのお問い合わせは、こちらのフォームにご記入ください。折り返しご記入いただいた連絡先へご連絡を差し上げます。 (56 words) - [The State of API Security | Black Duck](/content/resources/ebooks/the-state-of-api-security-html.html) (117 words) - [Reduce Friction in Your DevSecOps Program | Black Duck](/content/resources/ebooks/reduce-friction-in-devsecops-program-html.html): Get recommendations for removing friction within your SDLC. Examine the three areas of the SDLC where friction can be reduced using simple, flexible, and scalable application security testing solutions. (138 words) - [Datasheet: Defensics Fuzz Testing | Black Duck](/content/resources/datasheets/defensics-fuzz-testing-html.html) (86 words) - [[White Paper] What Is Fuzzing? | Black Duck](/content/resources/white-papers/what-is-fuzzing-html.html): Learn more about fuzzing as a technique to find software vulnerabilities, the components involved in a fuzz test, and how they work together by downloading this Black Duck whitepaper. (143 words) - [Datasheet: Seeker IAST |Black Duck](/content/resources/datasheets/seeker-iast-html.html) (47 words) - [Datasheet: Coverity Support for ISO/IEC TS 17961 | Black Duck](/content/resources/datasheets/coverity-iso-iec-html.html) (46 words) - [Datasheet: Coverity Support for AUTOSAR | Black Duck](/content/resources/datasheets/coverity-autosar-standards-html.html) (60 words) - [Datasheet: Black Duck Software Composition Analysis (SCA)](/content/resources/datasheets/black-duck-sca-html.html) (70 words) - [Datasheet: Business Logic Assessments with DAST | Black Duck](/content/resources/datasheets/continuous-dynamic-business-logic-assessment-methodology-html.html) (53 words) - [Datasheet: Continuous Dynamic | Black Duck](/content/resources/datasheets/continuous-dynamic-html.html) (37 words) - [Datasheet: Continuous Dynamic Program Management Services | Black Duck](/content/resources/datasheets/continuous-dynamic-program-management-services-html.html) (56 words) - [SEI CERT C Coding Standards: C, C++ & Java - SAST | Black Duck](/content/static-analysis-tools-sast/sei-cert-html.html): Get the SEI CERT C Coding Standards supported by Coverity. Get the full range of SEI CERT Coding Standards including C, C++, and Java. (4,948 words) - [DevOps integrations for developers | Black Duck](/content/integrations-html.html): Black Duck DevOps integrations bring AppSec testing into CI/CD pipelines to automate security risk detection, expedite fixes, and boost dev productivity. (1,770 words) - [Achieving True Scale Application Security | Black Duck](/content/resources/white-papers/achieving-true-scale-appsec-in-regulated-ai-driven-world-html.html): Get practical strategies for securing apps at scale in an AI-driven, highly regulated world. Achieve true scale AppSec with Black Duck Polaris Platform. (157 words) - [Solution Provider Program | Black Duck](/content/partners/solution-providers-html.html): Black Duck partners with global solution providers to offer customers with secure AppSec solutions. Become a Black Duck Solution Provider partner today. (584 words) - [ContextAI™ | AI-Powered Software Security Intelligence | Black Duck](/content/contextai-html.html): ContextAI powers AI and traditional AppSec with human-verified security intelligence covering 10M+ open source projects and 320K+ vulnerabilities. Build secure software with confidence. (394 words) - [platform/index.html](/content/platform/index.html) (1,136 words) - [customer-value/index.html](/content/customer-value/index.html) (554 words) - [FPT Software - Application Security Customer Case Study | Black Duck](/content/resources/case-studies/fpt-software-html.html) (672 words) - [Datasheet: Polaris Platform | Black Duck](/content/resources/datasheets/polaris-html.html) (52 words) - [Datasheet: Black Duck Solutions | Black Duck](/content/resources/datasheets/black-duck-product-services-portfolio-html.html) (71 words) - [Webセミナー | Black Duck](/content/ja-jp/resources/webinars-html.html): オープンソースとAIの普及によりソフトウェア開発は急速に進化する一方、コードベースの複雑化に伴い、OSSの脆弱性やライセンス競合が増加し、サプライチェーン全体のリスクが高まっています。サプライチェーン攻撃は業界を問わず現実的な脅威となっており、さらにAIコーディング・アシスタントの普及により、従来のセキ... (87 words) - [Gartner Magic Quadrant for AppSec Testing | Black Duck](/content/resources/analyst-reports/gartner-magic-quadrant-appsec-html.html) (308 words) - [Our Leadership | Black Duck](/content/company/leadership-html.html) (906 words) - [Contact Us | Black Duck Application Security](/content/contact-sales-html.html): Complete this form to contact Black Duck. We will reach out to you at the contact information provided. (341 words) - [Black Duck Partner Program | Black Duck](/content/partners-html.html): Black Duck is a leader in application security testing, with an extensive partner program aimed at creating an ecosystem of strategic go-to-market partners. (196 words) - [About Us | Black Duck](/content/company-html.html) (479 words) - [ソフトウェアの品質とセキュリティ、ホワイトペーパー| ブラック・ダック | Black Duck](/content/ja-jp/resources/white-papers-html.html): ソフトウェアの品質とセキュリティの向上のための読み物、技術資料をダウンロードできます。 (52 words) - [Software Security & AppSec White Papers | Black Duck](/content/resources/white-papers-html.html): Download security white papers that cover all aspects of the SDLC from software design to software testing and everything in between. Free downloads. (403 words) - [Black Duck | 2026 Gartner Magic Quadrant for Software Supply Chain Security](/content/resources/analyst-reports/gartner-magic-quadrant-software-supply-chain-security-html.html): Gartner places Black Duck as a Leader in the first-ever Magic Quadrant for Software Supply Chain Security. Download this report to learn why at blackduck.com. (319 words) - [Application Security Testing Webinars | Black Duck](/content/resources/webinars-html.html): Take a deep dive into our library of Black Duck webinars on all you need to know on application security and best practices., Your SBOM is more than something you generate because you're told to and then file it away. It can be a new business driver and a vital mechanism to saf... (293 words) - [Application Security & Software Quality Reports | Black Duck](/content/resources/analyst-reports-html.html): Download the latest analysis and reports from application security analysts. Read more at Blackduck.com (367 words) - [Application Security ROI & Customer Outcomes | Black Duck](/content/customer-value-html.html): See how 2,500+ organizations cut vulnerability remediation time by 66%, save $1M+ annually, and reclaim 600 hours of development capacity with Black Duck's application security platform. (528 words) - [Software and Application Security Blog | Black Duck](/content/blog-html.html): Get expert insights from the Black Duck software and application security blog. Explore topics from DevOps security, software news, analysis, intel and more. (263 words) - [Jobs at Black Duck | Black Duck Careers](/content/company/careers-html.html) (518 words) - [Product and Solution Datasheets | Black Duck](/content/resources/datasheets-html.html) (447 words) - [Accelerate AppSec Vulnerability Remediation with AI | Black Duck](/content/resources/ebooks/ai-accelerate-appsec-vulnerability-remediation-html.html): Discover how AI-driven remediation closes the gap between detecting and resolving vulnerabilities at scale. Get context-aware insights, standardized fixes, and developer-first workflows your AppSec program demands. (183 words) - [Glossary of Application Security Terms | Black Duck](/content/glossary-html.html): Build high-quality, secure software with application security testing tools and services from Black Duck. We are a Gartner Magic Quadrant Leader in AppSec. (209 words) - [Software Security & AppSec eBooks | Black Duck](/content/resources/ebooks-html.html): Download the latest security ebooks on web application security, software security design, software quality and more. (500 words) - [Software Security & AppSec Solutions | Black Duck](/content/solutions-html.html): Get solutions to your software security and application security security challenges by industry, security threat or by stage of your journey. (426 words) - [エンタープライズ向けアプリケーション・セキュリティ・テスト・プラットフォーム | Black Duck Polaris - SAST、DAST、SCAを統合](/content/ja-jp/platform-html.html): SAST、DAST、SCAを統合した自動アプリケーション・セキュリティ・テスト・プラットフォームのBlack Duck PolarisはSDLC全体にAppSecを拡張します。デモのお申し込みやお問い合わせもこちらから。 (49 words) - [Get pricing | Black Duck](/content/platform/get-pricing-html.html) (161 words) - [The State of AI-Powered Software Development | Black Duck](/content/resources/analyst-reports/state-of-ai-powered-software-development-html.html): 831 engineers and DevOps professionals revealed the real costs of moving fast with AI-generated code. Download the report to understand the governance and security gaps — and how to close them. (1,266 words) - [Customer Value Study | Black Duck](/content/resources/analyst-reports/customer-value-html.html) (126 words) - [Software Quality for Government and Public Sector | Black Duck](/content/solutions/government-html.html): Learn how federal agencies and government contractors improve software quality and compliance with Black Duck's AppSec solutions for the public sector, from AI-generated code security to SBOM and audit readiness. (508 words) - [Application Security for Medical Devices | Black Duck](/content/solutions/healthcare-html.html): Proactive security approaches are more important than ever, especially in heavily regulated industries like healthcare. Find out how Black Duck can help. (478 words) - [Embedded Software Security Solutions | Black Duck](/content/solutions/embedded-software-security-html.html): Secure embedded and commercial software with Black Duck’s array of solutions. Get static analysis, SCA, fuzzing, and compliance tools for safety-critical applications. (257 words) - [Software Composition Analysis Tools | Black Duck SCA](/content/software-composition-analysis-tools-html.html): Secure your software supply chain with Black Duck SCA tools. Scan 8.7M+ open source components, generate SBOMs, enforce policies. Forrester Wave Leader. Demo today. (531 words) - [Application Security for Financial Services | Black Duck](/content/solutions/financial-services-html.html): Find out how Black Duck has helped 16 out of the top 20 commercial banks with their software security and application security activities. (273 words) - [SAST Tools: Static Application Security Testing | Black Duck](/content/static-analysis-tools-sast-html.html): Black Duck SAST tools help developers find and fix security vulnerabilities in real-time. Integrate static analysis into your IDE, CI/CD pipelines, and code repos. Trusted by Fortune 100 companies. (612 words) - [Datasheet: Software Risk Manager for ASPM | Black Duck](/content/resources/datasheets/software-risk-manager-html.html) (61 words) - [Application Security for Automotive | Black Duck](/content/solutions/automotive-html.html): As cars become more and more connected, hackers are more likely to target auto apps. Black Duck helps its clients build software securely from the start. (356 words) - [Dynamic Application Security Testing (DAST) Tools & Solutions | Black Duck](/content/dast-html.html): Black Duck’s DAST tool solutions deliver fast, automated protection. Try dynamic application security testing tools and secure your systems. Visit now. (650 words) - [Ensure Software Quality and Security Standards Compliance | Black Duck](/content/solutions/compliance-html.html): Meet customer and regulatory requirements with ease by ensuring software quality and security standards compliance. Discover how to comply with critical standards and enhance your software's reputation. (1,117 words) - [Open Source Security & License Compliance Tools | Black Duck](/content/solutions/open-source-security-html.html): Manage legal risks of open source software and automate compliance with Black Duck open source security and license compliance solutions. (565 words) - [M&A Due Diligence | Black Duck](/content/solutions/mergers-and-acquisitions-html.html): Streamline M&A due diligence with Black Duck’s audit services, offering expert guidance in mitigating quality, security, and compliance risks. (466 words) - [AI-Driven Application Security & Risk Management | Black Duck](/content/solutions/enterprise-application-security-risk-management-html.html): Integrate AppSec at the speed of AI. Secure apps at developer speed with event driven scanning, intelligent risk prioritization, and automated governance. Built for modern, AI-powered development. (333 words) - [Container Security Solutions and Tools | Black Duck](/content/solutions/container-security-html.html): Black Duck container security tools and solutions can help improve container security efforts by managing open source risks in your apps and containers. (423 words) - [DevSecOps Solutions for Secure Software Development | CICD | Black Duck](/content/solutions/devsecops-html.html): Accelerate secure development with Black Duck DevSecOps solutions, which integrate across the software development life cycle (SDLC). Get real-time visibility into open source risk and automated risk management and security checks. (926 words) - [EU Cyber Resilience Act (CRA) AppSec solutions | Black Duck](/content/solutions/eu-cyber-resilience-act-compliance-html.html): Achieve EU CRA compliance with Black Duck. Enhance secure development, risk management, and software transparency with comprehensive AppSec solutions. (589 words) - [The Basics of AI Generated Code Security | Black Duck](/content/solutions/artificial-intelligence-software-development/secure-ai-code-generation-basics-html.html): Learn the basics of AI generated code security, including how AI coding tools work, the risks of AI generated code, and how to secure AI code with a hybrid security approach. (1,602 words) - [Application Security Testing Solutions | Black Duck](/content/solutions/application-security-testing-html.html): Black Duck delivers comprehensive application security testing (AST) through industry-leading static (SAST), Dynamic (DAST), interactive (IAST), and software composition analysis (SCA), with integration into CI/CD pipelines. (544 words) - [Software Supply Chain Security & SBOM Management | Black Duck](/content/solutions/software-supply-chain-security-html.html): Secure your software supply chain with Black Duck, and gain complete visibility into open source and third-party components. Identify risks, manage SBOMs, ensure compliance, and safeguard against supply chain attacks. (313 words) - [Polaris Demo | Black Duck](/content/platform/demo-html.html) (422 words) - [API Security Testing Tools and Solutions | Black Duck](/content/solutions/api-security-testing-html.html): Secure your APIs with Black Duck's comprehensive API security tools. Our API security testing tools protect your applications from emerging threats. (599 words) - [AI-Generated Code Security | Black Duck](/content/solutions/artificial-intelligence-software-development-html.html): Secure your AI-generated code with Black Duck. Confidently adopt AI code assistance by detecting vulnerabilities and hallucinated dependencies, and enforce security in AI-powered development. (745 words) - [Code Sight](/content/ja-jp/resources/datasheets/code-sight-html.html) (7 words) - [Datasheet: Code Sight IDE Plugin | Black Duck](/content/resources/datasheets/code-sight-html.html) (77 words) - [Black Duck Customer Success | Black Duck](/content/customer-success-html.html): The Black Duck Customer Success team helps you get the most out of your AppSec tools with technical integration and configuration support, product tutorials, and training. (337 words) - [Code Sight IDE Plugin: Real-Time Application Security Testing (SAST & SCA) | Black Duck](/content/code-sight-html.html): Code Sight: the IDE plugin that integrates static application security testing (SAST) and software composition analysis (SCA) to identify security risks in code, open source dependencies, and infrastructure-as-code. Find and fix issues as you code. (640 words) - [ContextAI™ | AI-Powered Software Security Intelligence | Black Duck](/content/contextai-ai-powered-software-security-intelligence-html.html): ContextAI powers AI and traditional AppSec with human-verified security intelligence covering 10M+ open source projects and 320K+ vulnerabilities. Build secure software with confidence. (373 words) - [AppSec Implementation Services & Deployment Support | Black Duck](/content/customer-success/implementation-html.html): Discover how to best utilize, manage, and deploy your application testing tools with Black Duck implementation services and deployment support. (510 words) - [Software Audit Services | Security & Due Diligence | Black Duck](/content/services/open-source-software-audit-html.html): Comprehensive software audits for M&A and security compliance. 20+ years of expertise in open source risk, SAST, code quality & penetration testing. Fast, accurate results. (692 words) - [Application Security Program & Strategy | Black Duck](/content/services/security-program-html.html): Address your unique software security and quality needs with specialized application security program and strategy. Learn more at Blackduck.com. (426 words) - [Seeker Interactive Web-Based Application Security | Black Duck](/content/interactive-application-security-testing/demo-html.html): Discover Black Duck® Seeker®: IAST software for web app security. Our tools provide active verification, sensitive-data tracking, and seamless DevOps integration. (73 words) - [Continuous Dynamic Demo | Black Duck](/content/dast/demo-html.html) (239 words) - [Software Risk Manager: Enterprise ASPM Platform | Black Duck](/content/software-risk-manager-html.html): Consolidate your AppSec tools with Software Risk Manager ASPM. 150+ integrations, automated correlation, centralized policies. See why 4,000+ orgs choose Black Duck. (263 words) - [Seeker Interactive Web-Based Application Security | Black Duck](/content/interactive-application-security-testing-html.html): Discover Black Duck® Seeker®: IAST software for web app security. Our tools provide active verification, sensitive-data tracking, and seamless DevOps integration. (546 words) - [Defensics Fuzz Testing Tools & Services | Black Duck](/content/fuzz-testing-html.html): Strengthen software robustness, ensure seamless system interoperability, and uncover vulnerabilities with Defensics, a fuzz testing tool leader. (561 words) - [Continuous Dynamic Application Security Testing (DAST) | Black Duck](/content/dast/continuous-dynamic-html.html): Identify web app vulnerabilities with Continuous Dynamic, a comprehensive DAST security solution. Perform dynamic testing and enhance your AppSec. (410 words) - [Coverity SAST | Static Application Security Testing by Black Duck](/content/static-analysis-tools-sast/coverity-html.html): Coverity delivers accurate, scalable static analysis (SAST) for enterprise code databases. Get a deep, accurate analysis of complex codebases, and detect critical vulnerabilities and compliance risks in languages like C, C++, Java, and C#—integrated seamlessly into DevSecOps pipelines. (1,180 words) - [Black Duck SCA | Software Composition Analysis Tools](/content/software-composition-analysis-tools/black-duck-sca-html.html): Black Duck SCA detects vulnerabilities, manages open source licenses, and generates SBOMs at enterprise scale — protecting your software supply chain and ensuring regulatory compliance. (1,676 words) - [アプリケーション・セキュリティ | オープンソース・セキュリティ | SAST/DAST/SCAツール | ブラック・ダック](/content/ja-jp-html.html): ブラック・ダックは、オープンソース・コンポーネントとライセンス、そして脆弱性を深いレベルまで可視化することで、ソフトウェア・サプライチェーンのセキュリティ対策を支援します。ブラック・ダックのソリューションは、コンプライアンスの徹底、開発の加速、AIコーディングの可視化、コストの大きいセキュリティ事象の予防を支援します。 (45 words) - [Reduce AI software risk with Black Duck Signal Agentic Application Security | Black Duck](/content/signal-ai-appsec-html.html): Signal combines 20+ years of security expertise with agentic AI-driven analysis to automatically find and fix security defects in human and AI-generated code. (955 words) - [Enterprise Application Security Testing Platform | Black Duck Polaris™ - SAST, DAST & SCA](/content/platform-html.html): Automated application security testing platform with SAST, DAST, and SCA. Scale AppSec across your SDLC with Black Duck Polaris. Get pricing & demo. (976 words) - [PHP2Shell: How to find and fix your exposure with SCA | Black Duck](/content/blog/php2shell-find-fix-exposure-sca-html.html): What php2shell is and why it matters If you run PHP, upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. The hard part is finding every place PHP actually runs. php2shell is a pair of critical flaws in the PHP interpreter, tracked as CVE-2026-109618 and CVE-2026-109619. Both are use-after-free bugs that can let an unauthenticated attacker […] (927 words, 2026-10-21) - [Polaris release update: Deeper detection, remediation you control, scanning wherever you work | Black Duck](/content/blog/blog-polaris-october-2026-update-html.html): What does it take to secure an application end to end? Source code, yes. But also the container images and binaries that carry hidden dependencies, and the AI frameworks your developers are already building with. As your application security program grows across more repositories, pipelines, and environments, you need coverage that keeps pace and automation […] (1,569 words, 2026-10-21) - [Black Duck Defensics Multiuser Deployment for Team Fuzz Testing](/content/blog/black-duck-defensics-multiuser-deployment-html.html): Discover Black Duck Defensics multiuser deployment: a shared, centrally managed fuzz testingservice for security teams. Compare three deployment options and pick the right one. (797 words, 2026-10-12) - [Can AI Handle Open Source Audits? LLMs vs. SCA Tools Explained](/content/blog/ai-llms-open-source-audit-sca-tools-html.html): LLMs can support open source audits but can’t replace SCA tools or human experts. Learn where AI falls short in license detection and M&A due diligence. (861 words, 2026-10-05) - [Top 10 Free Pen Tester Tools and How They Work | Black Duck Blog](/content/blog/top-10-free-hacking-tools-for-penetration-testers-html.html): Explore our top 10 free penetration testing tools. Understand their functionality and how they can enhance your cybersecurity strategy and manual review process. (720 words, 2026-09-23) - [10の主要なペネトレーションテスト・ツール | Black Duck Blog](/content/ja-jp/blog/top-10-free-hacking-tools-for-penetration-testers-html.html): 10の主要なペネトレーション・テスト・ツールをご紹介します。以下のツールを技術者の専門知識で補うことにより、手間のかかる手動のコード・レビューを簡素化できます。 (64 words, 2026-09-23) - [The AI coding security gap: Why faster development demands stronger guardrails | Black Duck](/content/blog/ai-coding-assistants-cybersecurity-defense-in-depth-html.html): AI can dramatically accelerate software delivery, but speed without security creates new forms of risk Anyone who’s watched an AI coding assistant generate a working API endpoint, scaffold a microservice, produce a comprehensive test suite, or create a user interface understands deep in their core that software engineering has fundamentally changed. The velocity of AI […] (2,779 words, 2026-08-14) - [Black Duck Signal: Security that moves at the speed of AI | Black Duck Blog](/content/blog/black-duck-signal-security-that-moves-at-the-speed-of-ai-html.html): Signal operates differently than traditional AST tools or single-model AI solutions. Where other solutions stop at identifying potential issues, Signal reasons about them with the depth and nuance of experienced security professionals. Learn more. (925 words, 2026-03-23) - [2024年オープンソース・セキュリティ&リスク分析](/content/ja-jp/blog/open-source-trends-ossra-report-html.html): 新しいOSSRAレポートによると、オープンソースの脆弱性は増加しています。 オープンソースのセキュリティ、コンプライアンス、およびコード品質のリスクに関する最新情報を確認してみましょう。 (52 words, 2026-02-25) - [Secure Your AI-Driven Software Supply Chain with Black Duck's AI Model Scanning | Black Duck Blog](/content/blog/black-duck-ai-model-scanning-html.html): Discover how Black Duck's AI Model Scanning helps you identify and manage AI/ML models in your software supply chain. Ensure license compliance, detect obscured models, and stay ahead of emerging AI regulations. (512 words, 2025-11-12) - [Streamline GitHub Repository Security with Black Duck Security App](/content/blog/black-duck-security-github-app-html.html): Discover how the Black Duck Security GitHub app simplifies onboarding and continuous synchronization of GitHub repositories with Black Duck SCA, Coverity, and Polaris for enhanced application security. (392 words, 2025-08-19) - [The Importance of Third-Party Due Diligence in Code Risk Assessment](/content/blog/third-party-due-diligence-code-risk-assessment-html.html): Understand how third-party due diligence can help acquirers assess code risk during mergers and acquisitions. Learn about the limitations of tools and the value of expert audits." (729 words, 2025-08-04) - [Secure AI generated code with DevSecOps | Black Duck Blog](/content/blog/secure-ai-generated-code-with-devsecops-html.html): Discover how to secure AI generated code to protect your organization from potential risks with these four DevSecOps best practices. (654 words, 2025-05-08) - [True Scale Application Security: Taming software risk | Black Duck](/content/blog/true-scale-application-security-html.html): True Scale Application Security enables organizations to scale their business without compromising on security, speed, accuracy, and compliance. (891 words, 2025-04-28) - [Xz Utils のバックドアについて知っておくべきこと | Black Duck](/content/ja-jp/blog/xz-utils-backdoor-supply-chain-attack-2-html.html): Learn about the Xz Utils Backdoor, what is means for supply chain security, and what you can do to protect yourself. (157 words, 2025-04-24) - [Top Open Source Licenses and Legal Risk | Black Duck Blog](/content/blog/top-open-source-licenses-html.html): Explore top open source licenses and understand their legal risks. A comprehensive guide for developers navigating the open source software landscape. (996 words, 2025-03-05) - [主要なオープンソース・ライセンスと開発者にとっての法的リスク](/content/ja-jp/blog/top-open-source-licenses-html.html): 上位20の人気のオープンソース・ライセンスを含め、2022年から2023年にかけて開発者の間で広く利用されているオープンソース・ライセンスとその法的リスクのカテゴリーについてご紹介します。 (408 words, 2025-03-05) - [Analyze AI-Generated Code with the Black Duck Snippet API | Black Duck Blog](/content/blog/analyze-ai-generated-code-black-duck-snippet-api-html.html): Black Duck Snippet Analysis is available via API as a more scalable solution for analyzing AI-generated code for open source license compliance. (1,130 words, 2025-02-03) - [BSIMM14:ソフトウェアのセキュリティ・プログラムの改善に役立つトレンドと推奨事項](/content/ja-jp/blog/bsimm-trends-and-recommendations-html.html): BSIMM14は、企業のソフトウェア・セキュリティ・アクティビティに関する調査を実施し、ソフトウェア・セキュリティ・イニシアティブ(SSI)をナビゲートするのに役立つガイドを作成しています。 (49 words, 2025-01-14) - [ソフトウェア脆弱性スナップショットレポートの調査結果 | Black Duck Blog](/content/ja-jp/blog/software-vulnerability-snapshot-report-findings1-html.html): ソフトウェア脆弱性スナップショット レポートから、業界固有の課題やソフトウェアを保護するための AppSec の推奨事項など、知見を得ることができます。 (93 words, 2024-12-18) - [A pragmatic guide to getting started with ASPM | Black Duck Blog](/content/blog/aspm-implementation-guide-html.html): Streamline security activities across your organizations with an application security posture management (ASPM) solution. Learn how to implement ASPM. (920 words, 2024-07-09) - [Building a Software Bill of Materials with Black Duck | Black Duck Blog](/content/blog/building-sbom-with-black-duck-html.html): Explore how Black Duck's SBOM export capabilities foster compliance with standards, customer trust, and enhance software supply chain security. (1,058 words, 2024-04-20) - [What Is a Software Bill of Materials (SBOM)? | Black Duck Blog](/content/blog/software-bill-of-materials-bom-html.html): Understand the importance of a Software Bill of Materials (SBOM) and how it helps manage security, license, and operational risks in open source usage. (1,065 words, 2024-03-17) - [Black Duck named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing | Black Duck Blog](/content/blog/customers-choice-award-gartner-peer-insights-html.html): Learn why Black Duck was named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing. (579 words, 2023-12-07) - [Securing Cloud-Native Apps: Black Duck' Top Gartner Score | Black Duck Blog](/content/blog/gartner-critical-capabilities-appsec-cloud-native-apps-html.html): Explore advanced tooling strategies for securing cloud-native apps. Dive into why Black Duck scored highest in Gartner's cloud-native app use case report. (1,639 words, 2023-10-30) - [IDE-Based Application Security for Developers in IntelliJ | Black Duck Blog](/content/blog/ide-based-appsec-code-sight-intellij-html.html): Explore Code Sight's security plugin for IntelliJ, enhancing IDE-based AppSec testing while seamlessly integrating with existing development workflows. (1,017 words, 2022-10-03) - [Managing License Compliance with Black Duck SCA | Black Duck Blog](/content/blog/manage-license-compliance-with-black-duck-html.html): Explore how Black Duck SCA offers an all-inclusive solution for managing risks related to security, quality, and license compliance in open source usage. (1,013 words, 2021-08-26) - [Securing 5G Potential with Top Fuzz Testing Techniques | Black Duck Blog](/content/blog/5g-security-fuzzing-html.html): Explore how fuzz testing techniques can ensure 5G security matches its vast potential. Stay ahead of risks and vulnerabilities in the 5G landscape. (959 words, 2020-03-03) ## Resources - [Full Page Index](/index.html): Browse all cached pages with rich metadata - [About This Cache](/about.html): Methodology, technical details, and usage guidelines - [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery - [Robots.txt](/robots.txt): Crawler directives - [Agentsite Network](https://agentsite.network/network.html): Public index of Agentsites and their machine-readable resources