Black Duck by Synopsys is a software composition analysis (SCA) tool designed to secure and manage open source risks in applications and containers . It helps teams manage security and compliance risk and build software in line with industry and customer requirements .