Black Duck vs OpenRASP
Black DuckSoftware Composition Analysis
CustomPublished price
OpenRASPApplication Security Posture Management
FreePublished price
Black Duck Software Composition Analysis Open source security and compliance. | OpenRASP Application Security Posture Management Built for Security | |
|---|---|---|
| Overview | ||
| Category | Software Composition Analysis | Application Security Posture Management |
| What it is | Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code. | Baidu-developed open-source RASP solution hooking into application server internals to provide context-aware real-time attack detection and prevention. |
| Pricing | ||
| Published price | Custom No public list price; quote-only, and AWS Marketplace listings are private-offer. Black Duck (formerly Synopsys' app-security business) SCA is sold by contract. Procurement benchm… | Free Open-source (Apache 2.0) Runtime Application Self-Protection engine from Baidu. No paid tier or subscription; free to download and self-host. Enterprise support is community/self-… |
| Pricing model | Custom quote | Free |
| Free options | No free plan · Free trial | Free plan · No free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2002 | 2017 |
| Team size | 1001-5000 employees | 10001+ employees |
| Headquarters | Burlington, Massachusetts | Beijing, China |
| Featured clients | BMW, Siemens, Bosch | Not available |