Black Duck

““From my perspective, what I like best about Coverity SAST is having comprehensive information and the ability to filter that information for such things as priorities, risk, and individual developer owners. I can filter for only the new issues that were discovered in the latest build. I have the ability to set whatever I want in the filters, which is great. We use the filtering feature constantly, as well as the notification feature whenever something in the database has changed.””

““We’ve seen improvements in both the quality and stability of our code,” noted Segal-Shevah. “Rather than a customer finding an issue and our going back-and-forth with them to solve the problem, we’re resolving code issues in-house before the software ships. The bottom line is that customers receive better code.””

““Throughout the two-year assessment process, the expert team from Black Duck has been extremely professional and competent. Their assessments of our software security are pragmatic. They also provided us with effective recommendations for improving our software security capabilities. OPPO looks forward to having further cooperation with Black Duck in software security enhancement,””

““OPPO has always treated the protection of users’ information and privacy as a priority,””

“The Black Duck team has also been instrumental in helping accelerate cultural change within the organization toward a security mindset for both operations and developers.”

““With DAST, we have confidence in saying to our customers ‘this is what was done to make your information more secure,’ and they know that every time there’s a new build of the application, it gets a new test.””

““Black Duck SCA is still relatively new to us, and we received a lot of help from the Black Duck SCA support team to address some deployment issues we ran into. I’m happy to say Black Duck SCA is now working like clockwork.””

“Whenever we’ve had a problem, the Coverity SAST support team has had a solution.””

““The ongoing support for Coverity SAST over the past few years has been really good.”

““We’ve also been very appreciative of the support we’ve received from Black Duck,””

““Being able to detect and manage  open source vulnerabilities  early in the  SDLC  helps lower remediation costs,””

““Using Coverity SAST has helped enhance our mandate to ensure code quality and security, as well as to enforce our compliance with SEI-CERT  coding standards for C, C++, and Java , and MISRA standards for C. Most importantly, Coverity SAST allows our developers to work on their essential tasks rather than having to allot time to identifying code defects.””

““We needed a solution to ensure we were tracking and managing open source and commercial components as part of our overall software security initiative.””

“SFR chose Seeker to help prevent code vulnerabilities of web applications and obtain real-time results for quick remediation.”

““When we built our business case for bringing in Black Duck, our internal information security group was a co-sponsor of the effort. This group now has a significantly easier way to determine which artifacts and versions are affected by any security vulnerability and which applications are impacted as a result. This capability did not exist before, so this is huge.””

““We would strongly recommend the Black Duck AST tools to all enterprises, especially those specializing in Embedded Systems where code quality is of paramount importance.””

““Black Duck SCA has solved a number of problems for us,” says Do Van Khac. “After adopting Coverity SAST in 2015 and Black Duck SCA in 2019 we are quite satisfied with Black Duck application security testing. Our evaluations indicate that Black Duck helps our developers be more productive by identifying relevant problems with fewer than 10% false positives or negatives. The tools’ rich reporting capabilities provide us with real-time insight into emerging trends so we can address problems sooner and minimize risk.””

““Black Duck has surpassed our expectations in code scanning and security checking enhancement.” says Do Van Khac. “Coverity SAST and Black Duck SCA provide us with tools to significantly improve our software quality and customer satisfaction as well. Thanks to Coverity SAST, we have achieved compliance with the security issues listed in the OWASP Top 10, demonstrating our capability to address the most critical security risks to web applications.””

““Developing large systems without tools like Coverity is like playing Russian roulette—it just isn’t something you should contemplate. Coverity gives you confidence that you haven’t missed something in your manual review processes, and that equates to an easy decision to make on a simple value-for-money basis.””

““Coverity continues to remain the most useful of the static code analysis tools, with its broad coverage and scanners. The false positive rate remains consistent despite the ever-increasing range of code checks that have been added. It is simply the best tool of its type in the market— still clearly ahead of its competitors,” he continued.”

“We can get results from all the tools we use consolidated into one place, and get the results filtered down to only the information we need.”

“Black Duck and Software Risk Manager have provided the results we’re looking for,”

“We’ve found Software Risk Manager very helpful with static code analysis, since it uses the same SAST engine that powers  Coverity® Static Analysis ,”

“The goal is to automate and embed, so security happens without getting in the way.”

“What we saw was an improvement in how accurately vulnerabilities were identified across both internal and third-party components. That gave us a much clearer picture of what actually needs attention.”