Ratings and Reviews 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Aikido Security Reviews & Ratings
    4.6 out of 5 stars 367 Ratings
    Company Website for Aikido Security
  • Source Defense Reviews & Ratings
    5.0 out of 5 stars 7 Ratings
    Company Website for Source Defense
  • Anaconda Reviews & Ratings
    4.4 out of 5 stars 626 Ratings
    Company Website for Anaconda
  • KrakenD Reviews & Ratings
    4.7 out of 5 stars 76 Ratings
    Company Website for KrakenD
  • Proton Pass Reviews & Ratings
    4.8 out of 5 stars 31,996 Ratings
    Company Website for Proton Pass
  • Gemini platform Reviews & Ratings
    4.3 out of 5 stars 1,178 Ratings
    Company Website for Gemini platform
  • Parasoft Reviews & Ratings
    4.6 out of 5 stars 152 Ratings
    Company Website for Parasoft
  • Rocket z/Assure VAP Reviews & Ratings
    5.0 out of 5 stars 1 Rating
    Company Website for Rocket z/Assure VAP
  • ONLYOFFICE Docs Reviews & Ratings
    4.6 out of 5 stars 715 Ratings
    Company Website for ONLYOFFICE Docs
  • Splashtop Autonomous Endpoint Management Reviews & Ratings
    4.7 out of 5 stars 404 Ratings
    Company Website for Splashtop Autonomous Endpoint Management

What is Sonatype Auditor?

Sonatype Auditor streamlines the management of open-source security by automatically creating Software Bills of Materials (SBOM) and pinpointing risks linked to third-party software. It features real-time monitoring capabilities for open-source components, allowing for the detection of vulnerabilities and license infringements. By delivering actionable insights and guidance for remediation, Sonatype Auditor assists organizations in fortifying their software supply chains while adhering to regulatory requirements. With ongoing scanning and the enforcement of policies, it empowers businesses to oversee their use of open-source materials effectively, minimizing security risks. Additionally, this tool fosters a proactive approach to security, encouraging organizations to stay ahead of potential threats.

What is Black Duck?

Black Duck, a division of the Synopsys Software Integrity Group, is recognized as a leading provider of application security testing (AST) solutions. Their wide-ranging suite of tools includes static analysis, software composition analysis (SCA), dynamic analysis, and interactive analysis, all designed to help organizations discover and mitigate security vulnerabilities during the software development life cycle. By simplifying the process of identifying and managing open-source software, Black Duck ensures compliance with security and licensing requirements. Their solutions are thoughtfully designed to empower organizations to build trust in their software while effectively handling application security, quality, and compliance risks in a manner that aligns with business needs. With Black Duck's offerings, companies can pursue innovation with a security-first approach, allowing them to deliver software solutions with confidence and efficiency. In addition, their dedication to ongoing advancement helps clients stay ahead of new security threats in the ever-changing tech landscape, equipping them with the tools needed to adapt and thrive. This proactive stance not only enhances operational resilience but also fosters a culture of security awareness within organizations.

Media

Media

Integrations Supported

Java
Go
NuGet
Ruby

Integrations Supported

Java
Apache Maven
Bizzy
BlueFlag Security
C#
Coverity Static Analysis
Gradle
Kondukto
Logilica
Longbow
Maverix
NorthStar Navigator
OpenText Static Application Security Testing
Phoenix Security
Rezilion
Vulcan Cyber

API Availability

API Availability

Pricing Information

Pricing not provided

Pricing Information

Pricing not provided
Free Trial Offered?

Supported Platforms

SaaS

Supported Platforms

SaaS
Windows

Customer Service / Support

Not specified

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Not specified

Training Options

Documentation Hub
Webinars

Company Facts

Organization Name

Sonatype

Date Founded

2008

Company Location

United States

Company Website

www.sonatype.com/products/auditor

Company Facts

Organization Name

Black Duck

Date Founded

2002

Company Location

United States

Company Website

www.blackduck.com

Categories and Features

Categories and Features

DevSecOps

Not specified

Fuzz Testing

Not specified

IT Asset Management

Asset Tracking
Audit Management
Compliance Management
Contract/License Management
Inventory Management
Supplier Management

License Management

History Tracking
Online Activation
Sarbanes-Oxley Compliance
Trial License

Penetration Testing

Not specified

Secure Code Training

Not specified

Popular Alternatives

Popular Alternatives

Revenera SCA Reviews & Ratings

Revenera SCA

Revenera
Snyk Reviews & Ratings

Snyk

5.0 out of 5 stars