Manage Open Source Security Vulnerabilities.

You have a critical mission: safeguarding your organization’s information assets. Firewalls and barriers only take you so far. Success requires involving the software development organization in the job of ensuring security as new applications, products and services are being created. Development’s use of open source software is largely unmanaged and can create blind spots in your security, while identifying and tracking vulnerabilities and installing patches is challenging with internal applications.

Black Duck enables you to safeguard information assets with better visibility and management of open source software components, and by making vulnerability tracking an integral part of development processes. Our solutions enable open source compliance and governance, open source license management and open source software security:

• Maintain a catalog of safe components. Help developers comply with information security policies by providing a catalog of approved components and by automating component approval.
• Receive regular security alerts. Threats are updated regularly from the National Security Vulnerability database, compared with your code base, and delivered directly to specific developers for rapid correction. Preempt security threats by quickly addressing component-level vulnerabilities.
• Gain visibility. Access open source component usage across the enterprise. When a vulnerability is discovered, pinpoint all affected projects and take action.

Find out more:

• Learn more about how the Black Duck® Suite can help security professionals and developers do their jobs more easily while facilitating fast, effective communication and policy compliance.
• Discover how Code Center accesses the National Vulnerability Database to provide you with timely information about threats to your code.
• Download and read the use case, Creating a Culture for Code Reuse.
• Watch our webinar, What’s Hiding In Your Code?
• Review our white papers for information about how Black Duck helps organizations like Intel and ICW reduce software rework and mitigate business risks.
• Contact us for more information about managing security vulnerabilities.