抱歉，尚不支持此语言

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Device | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

Black Duck 知识库

最全面的开源软件数据库

了解报价

申请演示

Black Duck 的开源 KnowledgeBase™ 知识库收录了业界超全面的开源项目、许可证和安全信息数据库，其中的信息均由 Black Duck 网络安全研究中心 (CyRC)负责获取和管理，涵盖超过 29,000 个暂存库和存储库的 630 多万个开源组件。

2,750+

独立的开源许可证

247,000+

独立漏洞

8,100,000+

开源项目

独家了解开源组件

2,750 多个独立的开源许可证

知识库包含 2,750 多个独立的开源许可证（GPL、LGPL、Apache 等），其中包含非常常用的开源许可证的完整许可证文本以及每个许可证内嵌的数十种特性和义务。

247,000 多个独立漏洞

我们跟踪超过 247,000 个独立漏洞，它们会影响超过 426,000 个组件版本，包括数千个未包含在国家漏洞数据库 (NVD) 或其他来源中的 Black Duck 专有漏洞。

810 多万个开源项目

我们对 810 多万个独立的开源项目进行了编目，使其能够与组成软件的组件进行高度精确的匹配，这些组件包括修改后的代码和开源代码片段。

深层许可证数据

深层许可证数据可识别“嵌入式许可证”，以帮助组织放心使用数千个没有声明许可证的项目。深层许可证数据揭示没有许可证数据的高风险项目，并为十分常用的开源许可证提供完整的许可证文本。

软件组件分析(SCA)技术

面对数千个网站和暂存器在全球范围内提供的数百万个开源项目，您很难（有时甚至不可能）有效跟踪开源的使用情况并管理应用程序安全、软件许可证合规，以及随之而来的组件质量风险。Synopsys SCA 解决了这个问题，使开发、安全和法律团队在其应用程序和容器中实现了对开源的超大可见性和控制。开源知识库是 Black Duck 的基础，提供业内全面的开源组件、漏洞和许可信息。

详细了解 Black Duck

准备好开始了么