application security posture management (ASPM)

Black Duck is an application security company that delivers True Scale Application Security, unifying SAST, SCA, DAST, IAST, and AI-powered analysis in a unified SaaS platform. It helps security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Black Duck was formerly the Synopsys Software Integrity Group (SIG) and became an independent company in October 2024 after being sold to Clearlake Capital Group and Francisco Partners.

Read more

AI-powered application securityCI/CD integrationdynamic application security testing (DAST)fuzz testinginteractive application security testing (IAST)on-premises, SaaS, and hybrid deploymentopen source and security auditsSBOM generation and managementsoftware composition analysis (SCA)static application security testing (SAST)

Checkmarx provides an agentic application security testing software platform. Its Checkmarx One platform combines hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface, helping enterprises secure every stage of the SDLC. The company states it scans trillions of lines of code each year and is trusted by security teams at 1,600+ enterprise customers.

Read more

AI-powered security agentsAPI securitycontainer securityDASThybrid scanningIaC securitysecrets detectionsoftware composition analysis (SCA)static application security testing (SAST)