Black Duck vs Whistic
Black DuckSoftware Composition Analysis
CustomPublished price
WhisticVendor Risk Management
CustomPublished price
Black Duck Software Composition Analysis Open source security and compliance. | Whistic Vendor Risk Management Vendor security assessment. | |
|---|---|---|
| Overview | ||
| Category | Software Composition Analysis | Vendor Risk Management |
| What it is | Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code. | Whistic provides vendor security assessment and trust management that helps organizations evaluate and share security postures for third-party risk management. |
| Pricing | ||
| Published price | Custom No public list price; quote-only, and AWS Marketplace listings are private-offer. Black Duck (formerly Synopsys' app-security business) SCA is sold by contract. Procurement benchm… | Custom Whistic's current public materials do not provide a citable numeric starting price for the commercial offering. Pricing is therefore treated as sales-led or quote-based. The named… |
| Pricing model | Custom quote | Custom quote |
| Free options | No free plan · Free trial | Free plan · Free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2002 | 2016 |
| Team size | 1001-5000 employees | 51-200 employees |
| Headquarters | Burlington, Massachusetts | Salt Lake City, Utah |
| Featured clients | BMW, Siemens, Bosch | Enterprise customers |