Black Duck Software Composition Analysis (SCA) vs. Snyk

Black Duck Software Composition Analysis (SCA)

Snyk

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Black Duck Software Composition Analysis (SCA)	Score 7.3 out of 10	N/A	Black Duck is a software composition analysis tool acquired and now supported by Synopsys since 2017.	N/A
Snyk	Score 8.2 out of 10	N/A	Snyk’s Developer Security Platform automatically integrates with a developer’s workflow and helps security teams to collaborate with their development teams. It boasts a developer-first approach that ensures organizations can secure all of the critical components of their applications from code to cloud, driving developer productivity, revenue growth, customer satisfaction, cost savings and an improved security posture. The vendor states Snyk is used by 1,200 customers worldwide today, including…	$0

Pricing

Black Duck Software Composition Analysis (SCA)

Snyk

Editions & Modules

No answers on this topic

Free: $0
Team (Snyk Open Source or Snyk Container or Snyk Infrastructure as Code): $23
per month per user
Business (Snyk Open Source or Snyk Container or Snyk Infrastructure as Code): $42
per month per user
Team (Snyk Open Source + Snyk Container + Snyk Code + Snyk Infrastructure as Code): $98
per month per user
Business (Snyk Open Source + Snyk Container + Snyk Code + Snyk Infrastructure as Code): $178
per month per user
Enterprise: Contact Sales

Offerings

Pricing Offerings
Black Duck Software Composition Analysis (SCA)	Snyk
Free Trial
No	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
Yes	No

Entry-level Setup Fee

Optional

No setup fee

Additional Details

Contact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.

Pricing is dependent on the number of developers selected, the number of products selected, and the payment term selected. Please visit the Snyk plans page for an interactive pricing calculator.

More Pricing Information

Community Pulse
	Black Duck Software Composition Analysis (SCA)	Snyk
Top Pros	Pro Open source Pro Risk management Pro Knowledge base	Pro Dependency management Pro Application security
Top Cons	Minus License model Minus Model based Minus Complete view	Minus Customizable dashboard Minus Leaves room

Best Alternatives
	Black Duck Software Composition Analysis (SCA)	Snyk
Small Businesses	No answers on this topic	No answers on this topic
Medium-sized Companies	Palo Alto Networks Prisma Cloud Score 8.1 out of 10	Palo Alto Networks Prisma Cloud Score 8.1 out of 10
Enterprises	Palo Alto Networks Prisma Cloud Score 8.1 out of 10	Palo Alto Networks Prisma Cloud Score 8.1 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Black Duck Software Composition Analysis (SCA)	Snyk
Likelihood to Recommend	9.0 (4 ratings)	8.2 (4 ratings)
Support Rating	8.2 (2 ratings)	- (0 ratings)

User Testimonials
	Black Duck Software Composition Analysis (SCA)	Snyk
Likelihood to Recommend	Synopsys If you are using a lot of open-source libraries, which is most likely, this is a must-have to ensure no known vulnerabilities slip into production Incentivized Verified User Anonymous Read full review	Snyk 1) SAST Code Scan 2) Infra Code Scan 3) Docker Image Scan 4) SAS solution and provides good integration with various SCMS Incentivized MS Manas Singh IT Architect Read full review
Pros	Synopsys Quick inventory scan: Black Duck helps us scan the code repositories in no time. And quickly list the components and I now really know what is in my code. Security and License risk management: Black Duck being rich in its knowledge base about the vulnerabilities and license issues of open source components, quickly compares the identified inventory to the Black Duck knowledge base and lists all the vulnerabilities and license issues in the code. Integration for automatic scanning: Black Duck is part of devops which provides us automatic scanning. Black Duck is not just for devops but also SecOps. Incentivized Rajiv Aradhyula Sr. Specialist Cloud Architect Read full review	Snyk Identify potential security issues. Analyse library dependencies. Secure code as it is written close to development. Incentivized AC Alex Campos Head of Engineering Read full review
Cons	Synopsys License model based on usage is costly. Documentation is extensive, but often confusing. Black Duck Hub could use some feature improvements for more robust governance capabilities Incentivized Emmanuel Canaan Project Manager, Technology Operations Read full review	Snyk Its a bit costly Incentivized Verified User Anonymous Read full review
Support Rating	Synopsys Support seems very responsive. Incentivized Verified User Anonymous Read full review	Snyk No answers on this topic
Alternatives Considered	Synopsys Black Duck is an obvious choice, with its versatility, integration, best enterprise support and on top of the list the knowledge base Black Duck has. Vega or Grabber also scans the application and tells about vulnerabilities. But it can never be compared with the feature set of Black Duck. Black Duck can also generate reports. Incentivized Rajiv Aradhyula Sr. Specialist Cloud Architect Read full review	Snyk Better Vulnerability research and GUI and usability Incentivized MS Manas Singh IT Architect Read full review
Return on Investment	Synopsys It is hard to measure ROI since Black Duck Hub saves us from costly legal battles that have thankfully never had to happen. Incentivized Emmanuel Canaan Project Manager, Technology Operations Read full review	Snyk Nothing big on our specific projects. Verified User Anonymous Read full review
ScreenShots	Black Duck Software Composition Analysis (SCA) Screenshots