Open source security vendor Black Duck has partnered up with Google to help the tech giant's customers benefit from Black Duck's automated security and productivity container tech, offering enhanced intelligence, visibility and control of risks.
The company's Black Duck Hub solution will be presented as a cloud-based security service on Google's Cloud Launcher Marketplace, which means customers can deploy the offering on the public cloud platform.
“For very clear economic and productivity reasons organisations are highly motivated to migrate their applications to the cloud," Black Duck CEO Lou Shipley said. "Because open source comprises most of the code in their applications and containers, they need to be sure the open source is secure and compliant. Black Duck Hub and Google Cloud provide that assurance."
Black Duck Hub gives Google customers the flexibility to automate their security and compliance, scanning apps and container images, identifying the open source components to detect any vulnerabilities that may be present.
It will also uncover any compliance problems the organisation may experience and problems with the code in a business' containers. If it discovers vulnerabilities or red flags, it will notify the business, whether they are newly uncovered open source vulnerabilities or better-known risks.
Black Duck will also make its KnowledgeBase available to Google Cloud customers, helping them stay in touch with open source intelligence.
“In order to deliver high-quality software, we’re constantly scanning our products for vulnerabilities and security threats,” said Aram Price, senior software engineer at Pivotal. “We collaborated with Black Duck to automate security scanning during development, and with the most recent release of Black Duck Hub we can also automate deployment to Google Cloud.”
