Black Duck vs Privva
Black DuckSoftware Composition Analysis
CustomPublished price
PrivvaThird-Party Risk Management
CustomPublished price
Black Duck Software Composition Analysis Open source security and compliance. | Privva Third-Party Risk Management Mitigate Vendor Breach Risk with Continuous Monitoring | |
|---|---|---|
| Overview | ||
| Category | Software Composition Analysis | Third-Party Risk Management |
| What it is | Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code. | Vendor risk assessment platform streamlining security questionnaire management with automation and risk scoring for third-party evaluations. |
| Pricing | ||
| Published price | Custom No public list price; quote-only, and AWS Marketplace listings are private-offer. Black Duck (formerly Synopsys' app-security business) SCA is sold by contract. Procurement benchm… | Custom No public pricing; subscription via quote. Privva was acquired by Entreda/Smarsh in 2021 and is now part of Smarsh's vendor risk management portfolio. Cloud-based third-party/vend… |
| Pricing model | Custom quote | Custom quote |
| Free options | No free plan · Free trial | No free plan · No free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2002 | 2016 |
| Team size | 1001-5000 employees | 11-50 employees |
| Headquarters | Burlington, Massachusetts | Baltimore, MD |
| Featured clients | BMW, Siemens, Bosch | Not available |