Click here to close now.


News Feed Item

Black Duck Software Announces Next Generation OSS Logistics Solution to Manage and Optimize Open Source

Black Duck Software, the leading OSS Logistics solutions provider enabling the adoption and management of open source software (OSS), today announced the release of Black Duck ® Suite™ 7 software that helps companies maximize the benefits of open source while managing the associated operational, legal, and security risks.

Black Duck Suite 7 provides an end-to-end OSS Logistics solution for enterprises using open source at scale, including: choosing the right OSS code; approving it automatically with built-in policies and workflows; scanning the code for origins and licenses; tracking what has been used and where for ease of reuse and maintenance; securing against vulnerabilities; and confidently delivering products and code throughout the supply chain.

“Open source is now a strategic element of all software development, and properly managing its use is essential for increasing the quality, innovation, and time-to-market of software solutions,” said Lou Shipley, President and CEO, Black Duck Software. “Black Duck customers have the competitive advantage of an in-depth knowledge of their source code and can easily adapt to security risks, like the recent Heartbleed vulnerability. Through the Black Duck Suite, enterprises gain greater control and visibility into where and how open source is used throughout the development lifecycle, mitigating risks and fully maximizing the benefits OSS offers.”

New Interface, Reporting, and Security Capabilities

Black Duck offers customers unparalleled insight into their open source code through the industry’s most comprehensive database of open source projects, the Black Duck KnowledgeBase. A range of newly added Black Duck Suite capabilities leverages years of experience analyzing code and assisting customers with OSS logistics solutions:

  • Analysis templates save time and simplify the open source reporting process, codifying best practices in OSS logistics.
  • Security data from the National Vulnerabilities Database (NVD) Common Vulnerabilities and Exposures (CVE) now includes base scoring, impact scoring, and exploitability scoring, making it easy to assess the impact of security vulnerabilities.
  • New dashboard allows for quick access to basic and advanced search capabilities, including enhanced search supported by Apache Solr for indexing the Black Duck KnowledgeBase and customer data.
  • An updated, graphical user interface incorporates user defined tagging functionality and other features to increase the flexibility of the Black Duck OSS Logistics solution.
  • Additional portfolio views provide an overview of key data such as top components, top licenses, and top programming languages currently in use in a customer’s software data.

Expanded Integration Set

OSS Logistics, delivered through the Black Duck Suite, gives your organization systematic control over the software development process by integrating with existing Integrated Development Environments (IDEs), Build and Continuous Integration (CI) tools, and reporting and repository management systems. In addition to existing integrations with JFrog Artifactory repository manager, IBM’s Rational Team Concert application lifecycle management solution, Maven builds, and the Coverity Connect software testing dashboard, Black Duck Suite 7 includes four new integrations:

  • Jenkins CI: Component discovery and approval is now integrated with the continuous build process
  • SonarQube: Key open source metrics are now available through SonarQube dashboards
  • Eclipse IDE: Developers can now access open source component meta-data directly from within Eclipse
  • Nexus: Component discovery and approvals are now available through Nexus

Black Duck Suite 7 is currently shipping and can be deployed as an on-premise solution or through a software-as-a-service (SaaS).

About Black Duck Software

Black Duck provides the world’s only end-to-end platform for OSS Logistics, enabling enterprises of every size to optimize the opportunities and solve the logistical challenges that come with open source adoption, governance, and management. As part of the greater open source community, Black Duck connects developers to comprehensive OSS resources through The Black Duck Open Hub (formerly Ohloh), and to the latest commentary from industry experts through the Open Source Delivers blog. Black Duck also hosts the Open Source Think Tank, an international event where thought leaders collaborate on the future of open source. Black Duck is headquartered near Boston and has offices in San Mateo, London, Paris, Frankfurt, Hong Kong, Tokyo, Seoul, and Beijing. For more information about how to leverage open source to deliver faster innovation, greater creativity, and improved efficiency, visit and follow the company at @black_duck_sw.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
The Internet of Things (IoT) is growing rapidly by extending current technologies, products and networks. By 2020, Cisco estimates there will be 50 billion connected devices. Gartner has forecast revenues of over $300 billion, just to IoT suppliers. Now is the time to figure out how you’ll make money – not just create innovative products. With hundreds of new products and companies jumping into the IoT fray every month, there’s no shortage of innovation. Despite this, McKinsey/VisionMobile data...
Just over a week ago I received a long and loud sustained applause for a presentation I delivered at this year’s Cloud Expo in Santa Clara. I was extremely pleased with the turnout and had some very good conversations with many of the attendees. Over the next few days I had many more meaningful conversations and was not only happy with the results but also learned a few new things. Here is everything I learned in those three days distilled into three short points.
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York and Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty ...
In his General Session at DevOps Summit, Asaf Yigal, Co-Founder & VP of Product at, explored the value of Kibana 4 for log analysis and provided a hands-on tutorial on how to set up Kibana 4 and get the most out of Apache log files. He examined three use cases: IT operations, business intelligence, and security and compliance. Asaf Yigal is co-founder and VP of Product at log analytics software company In the past, he was co-founder of social-trading platform Currensee, which...
DevOps is about increasing efficiency, but nothing is more inefficient than building the same application twice. However, this is a routine occurrence with enterprise applications that need both a rich desktop web interface and strong mobile support. With recent technological advances from Isomorphic Software and others, rich desktop and tuned mobile experiences can now be created with a single codebase – without compromising functionality, performance or usability. In his session at DevOps Su...
As organizations realize the scope of the Internet of Things, gaining key insights from Big Data, through the use of advanced analytics, becomes crucial. However, IoT also creates the need for petabyte scale storage of data from millions of devices. A new type of Storage is required which seamlessly integrates robust data analytics with massive scale. These storage systems will act as “smart systems” provide in-place analytics that speed discovery and enable businesses to quickly derive meaningf...
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
In his General Session at 17th Cloud Expo, Bruce Swann, Senior Product Marketing Manager for Adobe Campaign, explored the key ingredients of cross-channel marketing in a digital world. Learn how the Adobe Marketing Cloud can help marketers embrace opportunities for personalized, relevant and real-time customer engagement across offline (direct mail, point of sale, call center) and digital (email, website, SMS, mobile apps, social networks, connected objects).
The buzz continues for cloud, data analytics and the Internet of Things (IoT) and their collective impact across all industries. But a new conversation is emerging - how do companies use industry disruption and technology enablers to lead in markets undergoing change, uncertainty and ambiguity? Organizations of all sizes need to evolve and transform, often under massive pressure, as industry lines blur and merge and traditional business models are assaulted and turned upside down. In this new da...
We all know that data growth is exploding and storage budgets are shrinking. Instead of showing you charts on about how much data there is, in his General Session at 17th Cloud Expo, Scott Cleland, Senior Director of Product Marketing at HGST, showed how to capture all of your data in one place. After you have your data under control, you can then analyze it in one place, saving time and resources.
Culture is the most important ingredient of DevOps. The challenge for most organizations is defining and communicating a vision of beneficial DevOps culture for their organizations, and then facilitating the changes needed to achieve that. Often this comes down to an ability to provide true leadership. As a CIO, are your direct reports IT managers or are they IT leaders? The hard truth is that many IT managers have risen through the ranks based on their technical skills, not their leadership ab...
In recent years, at least 40% of companies using cloud applications have experienced data loss. One of the best prevention against cloud data loss is backing up your cloud data. In his General Session at 17th Cloud Expo, Sam McIntyre, Partner Enablement Specialist at eFolder, presented how organizations can use eFolder Cloudfinder to automate backups of cloud application data. He also demonstrated how easy it is to search and restore cloud application data using Cloudfinder.
The Internet of Everything is re-shaping technology trends–moving away from “request/response” architecture to an “always-on” Streaming Web where data is in constant motion and secure, reliable communication is an absolute necessity. As more and more THINGS go online, the challenges that developers will need to address will only increase exponentially. In his session at @ThingsExpo, Todd Greene, Founder & CEO of PubNub, exploreed the current state of IoT connectivity and review key trends and t...
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessi...
As organizations shift towards IT-as-a-service models, the need for managing & protecting data residing across physical, virtual, and now cloud environments grows with it. CommVault can ensure protection & E-Discovery of your data - whether in a private cloud, a Service Provider delivered public cloud, or a hybrid cloud environment – across the heterogeneous enterprise.