Black Duck Continuous Dynamic

What Black Duck Continuous Dynamic is

Black Duck Continuous Dynamic is a cloud-based SaaS service for dynamic security testing of web applications in QA and production. Continuous scans detect code or configuration changes and automatically retest fixes, while on-demand tests provide deeper assessments when needed. Live sites are scanned with low-and-slow payloads and benign injectors that Black Duck says avoid downtime. Findings use AI and machine learning with manual validation and include remediation guidance. Verified issues can be sent to Jira or another tracker with severity information. Open APIs export findings to SIEM systems and risk dashboards. The portal supports triage, current and historical assessment tracking, retest status, policy violations, and a Continuous Security Index score. Authentication secrets can be retrieved at runtime from HashiCorp Vault; Black Duck says credentials are not stored in the service. Unlimited concurrent assessments and onboarding for thousands of sites are supported without extra hardware or agents. Expert-led, PCI-aligned business-logic assessments address complex workflow issues, and security engineers provide guidance through the portal. Pricing is available by custom quote.