# Black Duck Software

**Canonical:** https://apis.io/providers/black-duck-software/  
**Website:** https://www.blackduck.com/  
**APIs profiled:** 0

Black Duck Software is an independent application security company (formerly the Synopsys Software Integrity Group, spun out in October 2024 and backed by Clearlake Capital and Francisco Partners). Its portfolio spans Software Composition Analysis (Black Duck SCA), static analysis (Coverity), dynamic and interactive testing, fuzzing, and the Polaris SaaS platform, helping organizations find and fix open-source, license, and security risk across the SDLC. Black Duck exposes a versioned REST API (custom media types, bearer-token / API-token auth, HAL-style hypermedia), native CI/CD plug-ins, the Detect command-line scanner, webhooks, and an official MCP server (Black Duck Signal) for AI coding assistants.

## Kin Score — 36.4 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 36.4).

| Facet | Score |
|---|---|
| Discoverability | 57.4 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 52.6 |
| Developer Ergonomics | 71.4 |
| Commercial Clarity | 36.8 |
| Access Clarity | 36.8 |

## Agent readiness — 12.6 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## MCP servers (1)

- **Black Duck Signal** — Black Duck Signal connects with popular AI coding assistants (Claude Code, Google Gemini, GitHub Copilot) via the Model Context Protocol so developers can run Black Duck securit...

## Security (4)

- **Black Duck Software Authentication** — apiKey/http · 2 schemes
- **Black Duck Software Domain Security** — TLSv1.3 · HSTS · DMARC
- **Black Duck Software Vulnerability Disclosure** — contact published
- **Black Duck Software Trust Center** — SOC 2 Type 2, SOC 3 Type 2, ISO 27001, ISO 27017, ISO 26262, CSA STAR (Self-Assessment / CAIQ), TISAX Level 2, TX-RAMP Level 2

## Tags

Company, Security, Application Security, Software Composition Analysis, Open Source Security, Static Analysis, DevSecOps, Vulnerability Management, SAST, SCA

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/black-duck-software/). Scores are computed from the provider's own public artifacts under a published rubric.