Black Duck vs PMD
Black DuckSoftware Composition Analysis
CustomPublished price
PMDSource Code Analysis
FreePublished price
Black Duck Software Composition Analysis Open source security and compliance. | PMD Source Code Analysis An extensible cross-language static code analyzer | |
|---|---|---|
| Overview | ||
| Category | Software Composition Analysis | Source Code Analysis |
| What it is | Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code. | Open source static analysis tool finding common programming flaws in Java, JavaScript, Apex, and other languages. |
| Pricing | ||
| Published price | Custom No public list price; quote-only, and AWS Marketplace listings are private-offer. Black Duck (formerly Synopsys' app-security business) SCA is sold by contract. Procurement benchm… | Free Open-source (BSD-style license) static analyzer. No paid edition, subscription, or license fee; distributed free via GitHub releases and package managers. Community-maintained. |
| Pricing model | Custom quote | Free |
| Free options | No free plan · Free trial | Free plan · No free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2002 | 2002 |
| Team size | 1001-5000 employees | 1-10 employees |
| Headquarters | Burlington, Massachusetts | Remote |
| Featured clients | BMW, Siemens, Bosch | Not available |