Cigital (now Synopsys)

Black Duck (formerly Cigital, now part of Synopsys) is a leading provider of application security program strategy and planning services. The company specializes in helping organizations assess, benchmark, and improve their software security initiatives through comprehensive assessment methodologies, most notably the Building Security In Maturity Model (BSIMM). With over a decade of experience in application security maturity assessments, Black Duck has established itself as a trusted partner for organizations seeking to understand and enhance their security posture relative to industry peers. The company offers a robust portfolio of services including BSIMM assessments, Maturity Action Plans (MAPs), and strategic consulting to help organizations build world-class application security programs. Their approach combines benchmarking data from hundreds of participating organizations with actionable guidance for security program design, implementation, and continuous improvement. Black Duck's services address modern security challenges including DevSecOps integration, cloud security, software supply chain security, and EU Cyber Resilience Act compliance. As part of the broader Black Duck platform, the company provides an integrated suite of application security testing tools alongside its consulting services, enabling organizations to implement comprehensive security programs that scale with their needs. Their expertise spans multiple industries including automotive, financial services, healthcare, IoT, and public sector organizations.