TrustRadius: an HG Insights company

Black Duck Software Composition Analysis (SCA) vs. Trend Micro Deep Security

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Black Duck Software Composition Analysis (SCA)

    Score10 out of 10
    N/ABlack Duck is a software composition analysis tool acquired and now supported by Synopsys since 2017.N/A

    Trend Micro Deep Security

    Score9 out of 10
    N/ATrend Micro™ Deep Security™ software provides comprehensive security for virtual, cloud, and container environments. Deep Security allows for consistent security regardless of the workload. It also provides a rich set of application programming interfaces (APIs) so security can be automated.N/A
    Pricing
    Black Duck Software Composition Analysis (SCA)Trend Micro Deep Security
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Black Duck Software Composition Analysis (SCA)Trend Micro Deep Security
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional DetailsContact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.—
    More Pricing Information
    Best Alternatives
    Black Duck Software Composition Analysis (SCA)Trend Micro Deep Security
    Small Businesses
    No answers on this topic
    Armor
    Score6 out of 10
    Medium-sized Companies
    No answers on this topic
    AWS CloudTrail
    Score8.8 out of 10
    Enterprises
    No answers on this topic
    AWS CloudTrail
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Black Duck Software Composition Analysis (SCA)Trend Micro Deep Security
    Likelihood to Recommend
    10.0
    (5 ratings)
    9.0
    (4 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    10.0
    (1 ratings)
    Usability
    8.0
    (1 ratings)
    8.0
    (1 ratings)
    Support Rating
    8.2
    (2 ratings)
    10.0
    (2 ratings)
    Implementation Rating
    -
    (0 ratings)
    10.0
    (1 ratings)
    User Testimonials
    Black Duck Software Composition Analysis (SCA)Trend Micro Deep Security
    Likelihood to Recommend
    Black Duck Software
    If you are using a lot of open-source libraries, which is most likely, this is a must-have to ensure no known vulnerabilities slip into production
    Incentivized
    Read full review
    Trend Micro
    Hypervisor based agentless security this product excels at. It provides thorough protection for your VM's. The web filtering product that comes with it also does a great job filtering out malicious websites from being accessed by users with a very user friendly prompt that they are going to a website which has been found to be malicious. This is particularly useful when it comes to VDI.
    Incentivized
    Read full review
    Pros
    Black Duck Software
    • Quick inventory scan: Black Duck helps us scan the code repositories in no time. And quickly list the components and I now really know what is in my code.
    • Security and License risk management: Black Duck being rich in its knowledge base about the vulnerabilities and license issues of open source components, quickly compares the identified inventory to the Black Duck knowledge base and lists all the vulnerabilities and license issues in the code.
    • Integration for automatic scanning: Black Duck is part of devops which provides us automatic scanning. Black Duck is not just for devops but also SecOps.
    Incentivized
    Read full review
    Trend Micro
    • It's easy to use the console.
    • It has a very similar look and feels to Deep Security Console.
    • It plugs into the Apex Central for easy management.
    Incentivized
    Read full review
    Cons
    Black Duck Software
    • License model based on usage is costly.
    • Documentation is extensive, but often confusing.
    • Black Duck Hub could use some feature improvements for more robust governance capabilities
    Incentivized
    Read full review
    Trend Micro
    • Trend Micro has very little room for improvement. I am using version 9.6 at this time and it is extremely reliable. Some of the upgrades were not completely intuitive, but in those cases Deep Security support came through with documentation that covered all the bases.
    Incentivized
    Read full review
    Likelihood to Renew
    Black Duck Software
    No answers on this topic
    Trend Micro
    It's the best one compared to other security applications
    Incentivized
    Read full review
    Usability
    Black Duck Software
    If you don’t know how to scan for the language, it isn’t entirely user friendly
    Incentivized
    Read full review
    Trend Micro
    It is the best application I've used. Its features are effective.
    Incentivized
    Read full review
    Support Rating
    Black Duck Software
    Support seems very responsive.
    Incentivized
    Read full review
    Trend Micro
    Trend Micro's support is pretty decent, we have had issues in the past and they have been fairly responsive to us and our complaints. Depending on how severe the issue was. Any ticket that had a high priority was handled very shortly especially when we contacted our account rep even if it was after hours, we were still able to get support within a short time period.
    Incentivized
    Read full review
    Implementation Rating
    Black Duck Software
    No answers on this topic
    Trend Micro
    Everything is good
    Incentivized
    Read full review
    Alternatives Considered
    Black Duck Software
    Black Duck is an obvious choice, with its versatility, integration, best enterprise support and on top of the list the knowledge base Black Duck has. Vega or Grabber also scans the application and tells about vulnerabilities. But it can never be compared with the feature set of Black Duck. Black Duck can also generate reports.
    Incentivized
    Read full review
    Trend Micro
    We selected trend micro to take the AV scans and filtering out of the hands of the Windows and Linux vm's we have deployed and move it to the hypervisor level. This has led us to be able to deploy only a single DSVA per host and can protect all VM"s that are on that hosts. This has allowed for more time being spent on other priority security tasks.
    Incentivized
    Read full review
    Return on Investment
    Black Duck Software
    • It is hard to measure ROI since Black Duck Hub saves us from costly legal battles that have thankfully never had to happen.
    Incentivized
    Read full review
    Trend Micro
    • 100% positive ROI. Without Deep Security we would have to leverage and endpoint protection management solution like Sophos or SEPM (Symantec). Although both are good products, from a cost perspective it would have hit us much harder. Trend Micro Deep Security scales very nicely.
    • Since Deep Security actually has zero (or at least unnoticeable) resource footprint on monitored VMs, it is a huge cost benefit for us. As previously mentioned, actual antivirus clients installed on each virtual machine (VM) would have significantly affected performance. This would have cost us much more additionally in paying for additional resources to allocate over VMs in the VMware environment. Deep Security is almost completely unintrusive from a resource perspective.
    • Also, from a layered security perspective, it helps us meet our goals; and since the price of Trend Micro Deep Security quite reasonable, it is that much easier to get approval for this specific internal layer of security.
    Incentivized
    Read full review
    ScreenShots

    Black Duck Software Composition Analysis (SCA) Screenshots

    Screenshot of Black Duck helps you find and fix your highest-priority vulnerabilitiesScreenshot of Use Black Duck to comply with open source license obligations and to verify compliance with all open source license  termsScreenshot of Black Duck automatically creates tickets in your activity tracking applications like Jira for both policy violations and vulnerabilitiesScreenshot of Black Duck's vulnerability ImpactAnalysis indicates whether a vulnerability is actually being called by your applicationScreenshot of The Black Duck security advisory gives the information you need to address security risks and make the fixScreenshot of Black Duck generates a Bill of Materials which gives you a complete and detailed inventory of all open source identified in your codebase