Synopsys is set to boost its application security testing portfolio with the acquisition of Black Duck Software.
Adding capabilities in IoT, DevOps and the Cloud, under the terms of the definitive agreement, Synopsys will pay approximately $565 million (or $548 million net) for the Massachusetts company. Black Duck provides products that automate the process of identifying and inventorying the open source code, detecting known security vulnerabilities and license compliance issues.
Synopsys said that the addition of Black Duck’s Software Composition Analysis solution will enhance its efforts in the software security market, and enable users to improve the software development cycle to allow continuous integration/continuous delivery and the move to the cloud.
Andreas Kuehlmann, senior vice-president and general manager of the Synopsys Software Integrity Group, said: “Our vision is to deliver a comprehensive platform that unifies best-in-class software security and quality solutions. Development processes continue to evolve and accelerate, and the addition of Black Duck will strengthen our ability to push security and quality testing throughout the software development lifecycle, reducing risk for our customers.”
“We’re excited to join an organization that shares our commitment to addressing security and quality issues at the earliest phases of the software development process,” said Lou Shipley, chief executive officer of Black Duck. “Doing so will enable us to provide leading solutions that enable customers to develop and deliver more secure and higher-quality software faster than ever before.”