Black Duck Software Composition Analysis (SCA) vs. FOSSA

Black Duck Software Composition Analysis (SCA)

FOSSA

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Black Duck Software Composition Analysis (SCA)	Score 7.3 out of 10	N/A	Black Duck is a software composition analysis tool acquired and now supported by Synopsys since 2017.	N/A
FOSSA	Score 2.0 out of 10	N/A	FOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.	N/A

Pricing

Black Duck Software Composition Analysis (SCA)

FOSSA

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
Black Duck Software Composition Analysis (SCA)	FOSSA
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
Yes	No

Entry-level Setup Fee

Optional

No setup fee

Additional Details

Contact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.

—

More Pricing Information

Community Pulse
	Black Duck Software Composition Analysis (SCA)	FOSSA
Top Pros	Pro Open source Pro Risk management Pro Knowledge base	Pro Automated emails
Top Cons	Minus License model Minus Model based Minus Complete view	No answers on this topic

Best Alternatives
	Black Duck Software Composition Analysis (SCA)	FOSSA
Small Businesses	No answers on this topic	No answers on this topic
Medium-sized Companies	Palo Alto Networks Prisma Cloud Score 8.1 out of 10	Palo Alto Networks Prisma Cloud Score 8.1 out of 10
Enterprises	Palo Alto Networks Prisma Cloud Score 8.1 out of 10	Palo Alto Networks Prisma Cloud Score 8.1 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Black Duck Software Composition Analysis (SCA)	FOSSA
Likelihood to Recommend	9.0 (4 ratings)	5.0 (1 ratings)
Support Rating	8.2 (2 ratings)	10.0 (1 ratings)

User Testimonials
	Black Duck Software Composition Analysis (SCA)	FOSSA
Likelihood to Recommend	Synopsys If you are using a lot of open-source libraries, which is most likely, this is a must-have to ensure no known vulnerabilities slip into production Incentivized Verified User Anonymous Read full review	FOSSA The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone! Incentivized Verified User Anonymous Read full review
Pros	Synopsys Quick inventory scan: Black Duck helps us scan the code repositories in no time. And quickly list the components and I now really know what is in my code. Security and License risk management: Black Duck being rich in its knowledge base about the vulnerabilities and license issues of open source components, quickly compares the identified inventory to the Black Duck knowledge base and lists all the vulnerabilities and license issues in the code. Integration for automatic scanning: Black Duck is part of devops which provides us automatic scanning. Black Duck is not just for devops but also SecOps. Incentivized Rajiv Aradhyula Sr. Specialist Cloud Architect Read full review	FOSSA Setup of tool. Speed of scans. Automated emails with reports. Incentivized Verified User Anonymous Read full review
Cons	Synopsys License model based on usage is costly. Documentation is extensive, but often confusing. Black Duck Hub could use some feature improvements for more robust governance capabilities Incentivized Emmanuel Canaan Project Manager, Technology Operations Read full review	FOSSA Interface for loading results can be slow, this is the #1 issue we have faced. Speed of scans could be improved. Incentivized Verified User Anonymous Read full review
Support Rating	Synopsys Support seems very responsive. Incentivized Verified User Anonymous Read full review	FOSSA Never needed support but the chat and help seem forefront of the app! Incentivized Verified User Anonymous Read full review
Alternatives Considered	Synopsys Black Duck is an obvious choice, with its versatility, integration, best enterprise support and on top of the list the knowledge base Black Duck has. Vega or Grabber also scans the application and tells about vulnerabilities. But it can never be compared with the feature set of Black Duck. Black Duck can also generate reports. Incentivized Rajiv Aradhyula Sr. Specialist Cloud Architect Read full review	FOSSA BlackDuck and Synk Incentivized Verified User Anonymous Read full review
Return on Investment	Synopsys It is hard to measure ROI since Black Duck Hub saves us from costly legal battles that have thankfully never had to happen. Incentivized Emmanuel Canaan Project Manager, Technology Operations Read full review	FOSSA Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software. Caused developers to make more informed decisions. Incentivized Verified User Anonymous Read full review
ScreenShots	Black Duck Software Composition Analysis (SCA) Screenshots