Black Duck Software
| Company type | Privately held company |
|---|---|
| Industry | Software, Application security |
| Founded | December 2002 |
| Founder | Doug Levin |
| Fate | Acquired by Synopsys in 2017; rebranded after 2024 divestment |
| Headquarters | Boston , United States |
Area served | Worldwide |
| Products | Software solutions and services for application security, open-source code detection, developer training, AI-based vulnerability identification |
| Parent | Black Duck Software (post-2024), formerly Synopsys Software Integrity Group (2017–2024) |
Black Duck Software operates as a privately held firm located near Boston, Massachusetts. Established in 2002 by Doug Levin, the company specializes in creating and distributing software solutions and services aimed at securing applications.
History
The inception of Black Duck dates back to December 2002, when Doug Levin founded the company. Following an initial venture capital raise of $38.5 million, the business attracted an additional $75.5 million in financing by the year 2017.
In 2017, Synopsys acquired Black Duck for $565 million, incorporating it into the "Synopsys Software Integrity Group." This integration brought together Black Duck with other Synopsys acquisitions such as Coverity, Seeker, Cigital, and Codiscope to strengthen its suite of application security offerings.
By 2024, the Synopsys Software Integrity Group was divested to private equity firms Clearlake Capital Group and Francisco Partners for $2.1 billion. Following this transaction, the enterprise was rebranded to its original name, Black Duck Software.
Products
Black Duck delivers software and related services concentrated on security testing within software development. The company initially focused on detecting open-source code utilization and evaluating associated security and licensing concerns. Over time, its portfolio has grown to encompass a wider array of application security solutions, including developer training, support, and development assistance. In 2024, Black Duck incorporated generative artificial intelligence technologies to improve identification of potential security vulnerabilities for its clients.