What is the official website of Black Duck ?

The official website of Black Duck is http://www.blackduck.com.

What is Black Duck's cybersecurity risk score?

Black Duck has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Black Duck experienced?

According to Rankiteo, Black Duck currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Black Duck been affected by any supply chain cyber incidents ?

According to Rankiteo, Black Duck has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Black Duck have SOC 2 Type 1 certification ?

According to Rankiteo, Black Duck is not certified under SOC 2 Type 1.

Does Black Duck have SOC 2 Type 2 certification ?

According to Rankiteo, Black Duck does not hold a SOC 2 Type 2 certification.

Does Black Duck comply with GDPR ?

According to Rankiteo, Black Duck is not listed as GDPR compliant.

Does Black Duck have PCI DSS certification ?

According to Rankiteo, Black Duck does not currently maintain PCI DSS compliance.

Does Black Duck comply with HIPAA ?

According to Rankiteo, Black Duck is not compliant with HIPAA regulations.

Does Black Duck have ISO 27001 certification ?

According to Rankiteo,Black Duck is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Black Duck operate in ?

Black Duck operates primarily in the Software Development industry.

How many employees does Black Duck have ?

Black Duck employs approximately 1,198 people worldwide.

Does Black Duck own any subsidiaries ?

Black Duck presently has no subsidiaries across any sectors.

How many LinkedIn followers does Black Duck have ?

Black Duck's official LinkedIn profile has approximately 17,896 followers.

What is the NAICS classification code for Black Duck ?

Black Duck is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Black Duck have a Crunchbase profile ?

Yes, Black Duck has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/black-duck-software.

Does Black Duck have a LinkedIn profile ?

Yes, Black Duck maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/black-duck-software.

How many cybersecurity incidents has Black Duck experienced ?

As of July 11, 2026, Rankiteo reports that Black Duck has not experienced any cybersecurity incidents.

How many peer or competitor companies does Black Duck have ?

Black Duck has an estimated 30,314 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Black Duck

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

Black Duck Vendor Cyber Rating & Cyber Score

blackduck.com

cb in

Add Your Compliance Badge

Black Duck® offers the most comprehensive, powerful, and trusted portfolio of application security solutions in the industry. We have an unmatched track record of helping organizations around the world secure their software quickly, integrate security efficiently in their development environments, and safely innovate with new technologies. As the recognized leaders, experts, and innovators in software security, Black Duck has everything you need to build trust in your software. Learn more at www.blackduck.com. Build trust in your software.

Black Duck A.I CyberSecurity Scoring

Scoring History

Black Duck

Black Duck CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Black Duck Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Black Duck

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Black Duck in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Black Duck in 2026.

Incident Types Black Duck vs Software Development Industry Avg (This Year)

No incidents recorded for Black Duck in 2026.

Incident History - Black Duck (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Black Duck Subsidiaries

Parent Company

Black Duck

Software Development

Website: http://www.blackduck.com

Company Size: 1,198

No subsidiary data available for this company.

Loading…

Black Duck Similar Companies

Just Eat Takeaway.com

justeattakeaway.com

Just Eat Takeaway.com is a leading global online delivery marketplace, connecting consumers and restaurants through our platform in 16 countries. Like a dinner table, working at JET brings our office employees and couriers together. From coding to customer service to couriers, JET is a fun, fast-paced and supportive place where you can be yourself. No day is the same. Our days are filled with new experiences. We see every challenge that comes our way as a chance to grow, both the business, and ourselves. We’re connected to millions of food-lovers, hundreds of thousands of connected partners and some of the best-known brands of the planet. When you take your seat here, you’ll find that a simple scribble on a napkin can turn into something seen by millions. Together we transform, create, reinvent and empower every food moment. As a leading online food tech company, JET brings together the stability of a global business, with the agility of a start-up. We got here by always staying one step ahead of the competition. So load up your plate with ideas that get you excited, because at JET everything is on the table. https://careers.justeattakeaway.com

GlobalLogic

cb globallogic.com

GlobalLogic, a Hitachi Group company, is a trusted partner in design, data, and digital engineering for the world’s largest and most innovative companies. Since our inception in 2000, we have been at the forefront of the digital revolution, helping to create some of the most widely used digital products and experiences. Our purpose is to positively impact society and the planet through cutting-edge technology. Together with our clients, we are engineering impact through intelligent products, platforms, and services that are designed for desirability, engineered for excellence, and curated for intelligence. Our people-first culture fosters shoulder-to-shoulder teamwork, supported by a unique lab model and flexible delivery options, including onshore, nearshore, and offshore solutions. We also prioritize environmental stewardship in our product development and are committed to leveraging the diversity of thoughts as a driver for business innovation, attracting and developing talent, and sustainable growth. We are proud of our global recognitions: Leader in the ISG Provider Lens™ Digital Engineering Services 2024 U.S. report Everest Group's Software Product Engineering Services Peak Matrix 2024 Star Performer in Major Contender in Everest Group’s Trust & Safety Peak Matrix 2024 2024 EcoVadis Silver Sustainability Rating Join us as we continue to shape the future of digital engineering and create lasting impacts for businesses and communities worldwide: globallogic.com

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

SS&C Technologies

ssctech.com

SS&C is a leading global provider of mission-critical, cloud-based software and solutions for the financial and healthcare industries. Named to the Fortune 1000 list as a top U.S. company based on revenue, SS&C (NASDAQ: SSNC) is a trusted provider to more than 22,000 financial services and healthcare companies, with over 27,000 employees and operations in more than 35 countries. Built upon a foundation of expertise, innovation and excellent customer service, SS&C powers some of the largest financial and healthcare firms in the world. +++++++++++++++++ ALPS Portfolio Solutions Distributor, Inc., ALPS Advisors, ALPS Funds and SS&C Technologies are affiliated. Distributed by ALPS Portfolio Solutions Distributor, Inc. AN INVESTMENT IN THE FUNDS INVOLVES RISK, INCLUDING LOSS OF PRINCIPAL. AN INVESTOR SHOULD CONSIDER INVESTMENT OBJECTIVES, RISKS, CHARGES AND EXPENSES CAREFULLY BEFORE INVESTING. TO OBTAIN A PROSPECTUS, WHICH CONTAINS THIS AND OTHER INFORMATION, CALL 1.877.398.8461 OR VISIT WWW.ALPSFUNDS.COM. READ THE PROSPECTUS CAREFULLY BEFORE INVESTING.

Epic

epic.com

Join us in our mission to help the world get well, help the world stay well, and help future generations be healthier. We hire smart and motivated people from all academic majors to code, test, and implement healthcare software that hundreds of millions of patients and doctors rely on to improve care and ultimately save lives around the globe. No healthcare experience is necessary; we'll train you to be an expert in health IT and we'll provide you with personal development classes to grow as a professional. Our expectations for you are high, but in healthcare so are the stakes.

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Upwork

cb upwork.com

Upwork is the world’s work marketplace that connects businesses with independent talent from across the globe. We serve everyone from one-person startups to large, Fortune 100 enterprises with a powerful, trust-driven platform that enables companies and talent to work together in new ways that unlock their potential. Our talent community on Upwork encompasses more than 10,000 skills in categories including website & app development, creative & design, customer support, finance & accounting, consulting, and operations.

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

Loading…

NEWS

Black Duck CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 17, 2026 12:12 PM

Strategic AI Governance: Navigating Compliance and Risk in the AI Era

Most AI programs still rebuild governance three to five times. Teams document the same models and suppliers separately for the EU AI Act,...

Read Article

February 12, 2026 08:00 AM

Published CVEs could hit record-breaking 50,000-plus in 2026

The number of new vulnerability disclosures is predicted to surpass 50,000 in 2026, the first time Common Vulnerabilities and Exposures...

Read Article

February 11, 2026 08:00 AM

Accenture stock drops as CEO share-sale filing and $1.4 billion contract protest hit tape

Accenture shares fell 2.4% to $235.13 in morning trading, underperforming the S&P 500.

Read Article

January 21, 2026 08:00 AM

Cyber Insights 2026: API Security – Harder to Secure, Impossible to Ignore

Cybersecurity experts share insights on securing Application Programming Interfaces (APIs), essential to a connected tech world.

Read Article

January 21, 2026 08:00 AM

Wireless Hack Shows New Issues

The Black Duck research team recently disclosed findings related to a Broadcom Wi-Fi chipset commonly used across enterprise, consumer,...

Read Article

January 14, 2026 08:00 AM

Broadcom chip software flaw affecting ASUS routers enables DoS

The exploit requires no authentication and requires a manual router reset to reconnect.

Read Article

January 13, 2026 08:00 AM

ASUS router bug can bring down whole networks

Security researchers uncovered a wireless vulnerability affecting ASUS routers that poses the risk of total network disruption.

Read Article

January 13, 2026 08:00 AM

Key learnings from the latest CyRC Wi-Fi vulnerabilities

The Black Duck Cybersecurity Research Center (CyRC) recently uncovered high-risk vulnerabilities in wireless routers:.

Read Article

January 13, 2026 08:00 AM

CyRC advisory: Vulnerability in Broadcom chipset causes network disruption and client disconnection on wireless routers

The Black Duck Cybersecurity Research Center (CyRC) discovered an issue while testing the interoperability of the Defensics® Fuzzing with...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55175

SUMMARY

Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead to remote code execution on rosco pods when performing Kustomize bakes. This issue is fixed in versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4.

Published

Date2026-07-10

Updated

Date2026-07-10

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.6

REFERENCES

CVE-2026-44383

SUMMARY

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

Published

Date2026-07-10

Updated

Date2026-07-10

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-42952

SUMMARY

Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.

Published

Date2026-07-10

Updated

Date2026-07-10

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-20744

SUMMARY

The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.

Published

Date2026-07-10

Updated

Date2026-07-10

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-15089

SUMMARY

vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.

Published

Date2026-07-10

Updated

Date2026-07-10

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://www.drupal.org/sa-contrib-2026-079

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…