UltraViolet Cyber announced on September 4, 2025, that it acquired Black Duck’s Application Security Testing (AST) services business. The deal covers security testing, assessment, and consulting services—not Black Duck as a whole or its continuing software and SaaS portfolio.
What UltraViolet acquired
The transferred business provides professional application-security services. UltraViolet said those capabilities were integrated into its unified security operations portfolio and include:
- Penetration testing and red teaming
- Threat modeling
- Cloud and container risk assessments
- Architecture risk analysis
- Secure software development consulting
The company described the expansion as supporting assessments of multi-cloud workloads, DevSecOps pipelines, and containerized deployments. It said the services are intended to help public- and private-sector clients identify software risks before production issues arise; the announcement did not provide independent measurements of results. UltraViolet’s September 4, 2025 announcement lists the acquired capabilities and the company’s stated rationale.
What stayed with Black Duck
The acquisition was limited to the AST services business. The announcement says Black Duck would continue offering its software and SaaS products, while professional and managed services would continue through its partnership with UltraViolet. Black Duck’s October 2024 portfolio included Polaris SaaS Platform, Coverity Static Analysis, Black Duck Software Composition Analysis (SCA), WhiteHat Continuous Dynamic Analysis, Seeker Interactive Analysis, and Defensics Protocol Fuzzing, alongside services. Black Duck’s October 2024 launch announcement describes its portfolio as an independent company.
#1 Best Overall
| Area | After the September 2025 deal |
|---|---|
| AST testing, assessments, and consulting services | Acquired by UltraViolet and integrated into its security operations portfolio, according to UltraViolet’s announcement. |
| Black Duck software and SaaS | Continued to be offered by Black Duck, according to the acquisition announcement. |
| Professional and managed services | Black Duck said these would continue through its partnership with UltraViolet. |
Why Black Duck was independent before the deal
Black Duck became an independent application security company in October 2024, when Clearlake Capital and Francisco Partners completed their acquisition of Synopsys’ Software Integrity Group. The firms valued that separate 2024 transaction at up to $2.1 billion, including up to $475 million in contingent consideration tied to specified investor returns and liquidity transactions. Those figures concern the Synopsys transaction—not UltraViolet’s 2025 acquisition. The 2024 completion announcement gives the transaction’s terms.
Was the purchase price disclosed?
No purchase price or other financial terms for UltraViolet’s 2025 acquisition were disclosed in the reviewed announcement. The up-to-$2.1 billion figure sometimes associated with Black Duck refers to the prior acquisition of Synopsys’ Software Integrity Group and should not be attributed to UltraViolet’s deal.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the companies said—and what is established
UltraViolet CEO Ira Goldstein said, “Building security in early, not bolting it on later, is essential to combating sophisticated threats.” Black Duck CEO Jason Schmitt said the move would let customers continue receiving security testing services while adding scale, scope, and specialization through UltraViolet’s security operations.
Black Duck also cited “seven consecutive years” in the Gartner Magic Quadrant for Application Security Testing in its October 2024 company announcement, referring to Gartner’s report published May 17, 2023. That is Black Duck’s stated recognition history, not a measure of the acquisition’s performance. No independent statistic measuring the results of UltraViolet’s 2025 acquisition was identified in the reviewed sources.
Recommended Free Tools
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
