Black Duck Sec Mod E304-0 Hosted — 1 Project Add-On

Add focused open-source risk management to a single hosted application project. Black Duck Sec Mod delivered as a hosted add-on provides continuous software composition analysis (SCA) and SBOM output for one project, enabling teams to detect vulnerable components, identify restrictive licenses, and produce compliance evidence without on-prem infrastructure. Assign the add-on to an application repository or CI pipeline, run scheduled or on-demand scans, and export actionable reports for security, legal, and release teams. Designed to sit alongside existing developer toolchains, the hosted project add-on reduces time-to-remediation, centralizes open-source inventory for the covered project, and preserves procurement control by licensing per-project rather than per-organization.