Black Duck Polaris

Web · API

Freedom report

One barScore 5.4

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Black Duck Polaris is ranked #13 of 25 in DevSecOps platforms on Freedom251. It runs on API, Web. A free trial is offered.

Black Duck Polaris plans and pricing

All plans

Standard package Not published Polaris fAST Static · IaC analysis · secrets detection · Polaris fAST SCA · dependency and CodePrint scanning · Polaris fAST Dynamic · API scanning · DevOps integrations · centralized policy configuration · dashboards and reporting blackduck.com · 1 Oct 2026

Build your own (à la carte) Not published Flexible packaging · comprehensive application security blackduck.com · 1 Oct 2026

Compared on DevSecOps platforms

Deployment model: cloud
Container scanning: Yes
Policy as code: Yes
Remediation workflows: Yes
SBOM management: Yes
Compliance reporting: Yes

Best Black Duck Polaris alternatives

See all 12

Two bars Aikido CSPM Free tier No. 1$300/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Endor Labs Free tier No. 3Free6.6 Two bars Semgrep Code Free tier No. 4$30/mo6.6 Two bars Snyk Open Source Free tier No. 5$25/mo6.6 One bar Contrast Security Platform Free tier No. 6$750/mo6.5

The record

Product type: Polaris is a cloud-native, software-as-a-service application security testing platform for unifying and automating application security across the software development life cycle.
Analysis engines: The platform integrates SAST with Polaris fAST Static, SCA with Polaris fAST SCA, and DAST with Polaris fAST Dynamic.
Additional scanning: Polaris combines SAST, SCA, and DAST with infrastructure-as-code analysis and secrets detection.
Risk management: Polaris provides unified dashboards, intelligent correlation, contextual enrichment, portfolio-wide analytics, and role-based views for risk prioritization.
SBOM: Polaris can generate software bills of materials using package-manager, signature, binary, and container analysis.
SCM integrations: Polaris supports repository integrations with Azure DevOps, Bitbucket, GitHub, and GitLab.
Issue tracking: Supported issue-tracking integrations include Azure DevOps, Jira Cloud and Data Center, and ServiceNow, with two-way synchronization available for Jira and ServiceNow.
Automation API: Polaris provides APIs for issue data, triage, test automation, service accounts, and repository integrations.
Security controls: Black Duck states that customer data is encrypted in transit and at rest, with HTTPS/TLS 1.2 or better and AES-256 or better for persistent data.
Compliance certifications: Black Duck lists SOC 2 Type 2, SOC 3 Type 2, ISO 27001, ISO 27017, ISO 26262, CSA STAR self-assessment, TISAX, and TX-RAMP Level 2 covering Polaris.
Support: The Black Duck Developer Portal offers documentation, a community account, and a contact-support channel for Polaris users.
Subscription limit: The Polaris service description states that one application may not exceed 1 million lines of code and that a subscription application may have up to five supporting projects.
Headquarters: Burlington, Massachusetts, United States

Where it ranks on Freedom251

Best DevSecOps Platforms in 2026#13 of 25
Best Interactive Application Security Testing Software in 2026#10 of 14

Is Black Duck Polaris yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Black Duck Polaris

Sources

blackduck.com/platform.html· checked 1 Oct 2026
polaris.blackduck.com/developer/default/polaris-documentation· checked 1 Oct 2026
docs.blackduck.com/r/polaris/black-duck-polaris-platform/c· checked 1 Oct 2026
docs.blackduck.com/r/polaris/black-duck-polaris-platform/o· checked 1 Oct 2026
polaris.blackduck.com/developer/default/· checked 1 Oct 2026
blackduck.com/company/legal/security-commitments.html· checked 1 Oct 2026
blackduck.com/content/dam/black-duck/en-us/legal/saas· checked 1 Oct 2026
blackduck.com/solutions/devsecops.html· checked 28 Sept 2026
blackduck.com/platform/get-pricing.html· checked 1 Oct 2026