Black Duck vs Sonatype
Black DuckSoftware Composition Analysis
CustomPublished price
SonatypeSoftware Composition Analysis
$175+ / yearPublished price
Black Duck Software Composition Analysis Open source security and compliance. | Sonatype Software Composition Analysis Secure your software supply chain. | |
|---|---|---|
| Overview | ||
| Category | Software Composition Analysis | Software Composition Analysis |
| What it is | Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code. | Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance. |
| Pricing | ||
| Published price | Custom No public list price; quote-only, and AWS Marketplace listings are private-offer. Black Duck (formerly Synopsys' app-security business) SCA is sold by contract. Procurement benchm… | $175+ / year Nexus Repository OSS: Free (open source) Nexus Repository Pro: $175/year Sonatype Lifecycle: Custom pricing |
| Pricing model | Custom quote | Tiered plans |
| Free options | No free plan · Free trial | Free plan · Free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2002 | 2008 |
| Team size | 1001-5000 employees | 501-1000 employees |
| Headquarters | Burlington, Massachusetts | Fulton, Maryland |
| Featured clients | BMW, Siemens, Bosch | Capital One, Equifax, Delta Airlines |