Black Duck Polaris
by Black Duck
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
About
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
Black Duck Polaris is a developer-first SaaS platform that combines Black Duck's SAST, SCA and DAST engines with IaC analysis and secrets detection in one place. Findings from every test type are consolidated into a single interface with an integrated risk score and exploitability and reachability analysis.
Polaris onboards projects automatically from GitHub, GitLab, Bitbucket and Azure DevOps, runs scans on pull requests and merges, and enforces policy gates that can break builds or block pull requests. Black Duck Assist provides AI triage and AI-generated SAST fix pull requests. Pricing follows a consumption-based model.
Key features
Product details
Vendor
Black Duck
Category
Application & API Security
Pricing model
usage-based
Starting price
Consumption-based pricing
Free trial
No
Deployment
SaaS (cloud-native)
Pricing
Pricing model: usage-based
Visit website for full pricing detailsSimilar software
42Crunch
by 42Crunch
API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.
Aikido Security
by Aikido Security
Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.
Akamai API Security
by Akamai Technologies
API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.
Barracuda WAF-as-a-Service
by Barracuda Networks
Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.
Burp Suite Professional
by PortSwigger
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.
Cequence API Security
by Cequence Security
AI-first API security that discovers, monitors and tests APIs and blocks API attacks.