Black Duck

Hosted dynamic scanner offered alongside Black Duck's static and composition analysis, aimed at automated web and API testing inside a pipeline.

A build-integrated static analyzer known for deep interprocedural analysis of C and C++, covering memory safety, concurrency and injection defects.

Agent based interactive testing that instruments the running application, tracks tainted and sensitive data through it, and replays requests to confirm exploitability.