Black Duck is a software composition analysis (SCA) solution developed by Synopsys. It allows users to find and fix security issues, detect risks, build a software bill of materials (SBOM), monitor vulnerabilities, etc.