Black Duck Polaris Platform is an integrated application security platform that provides automated testing and issue prioritization for comprehensive risk assessment. The platform delivers Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST) capabilities through a cloud-based infrastructure. The platform integrates security testing into CI/CD pipelines and allows organizations to establish guidelines for automated actions such as scheduling tests, breaking builds, and setting fix-by dates. For static scans, human assessors review findings to reduce false positives. The platform integrates with source code management repositories including GitHub, GitLab, Bitbucket, and Azure DevOps, and creates tickets in Azure DevOps and Jira for identified issues. The platform includes a web interface for managing subscriptions, scheduling testing, reviewing issues, and monitoring security status through dashboards. It provides a command line interface with scripting capabilities for test automation and APIs for retrieving and filtering issue data.
