Black Duck Enhances AI-Powered Security Assistant with Real-Time Code Scanning and Fixes

Black Duck Software, Inc. has announced significant enhancements to its AI-powered application security assistant, Black Duck Assist, now integrated into the Code Sight IDE plugin. This development introduces automated security scanning for AI-generated code and AI-driven code fixes directly within developer environments, aiming to ensure the seamless protection of application code. The integration addresses the growing need for security in AI-augmented development, as highlighted by Gartner's insights on the importance of complementing coding efficiency gains with security measures.

The Code Sight IDE plugin enables Black Duck Assist to scan code in real time, whether written by developers or generated by AI coding assistants. It identifies security vulnerabilities and potential intellectual property violations early in the development process. Furthermore, the tool provides developers with AI-generated vulnerability summaries, code analysis, and suggestions for fixes within their development environment, facilitating quick delivery of secure and compliant code without the need to switch tools or consult security experts.

Expanding its compatibility, Code Sight is now available for AI code editors such as Cursor and Windsurf, alongside traditional IDEs like Eclipse, IntelliJ, and Visual Studio. This expansion allows developers to safely incorporate code generated by AI coding assistants, including GitHub CoPilot and Claude Code. Additionally, Black Duck Assist now supports natural language queries in both the IDE and the Polaris platform, enabling users to easily access project statistics, testing results, and trends, as well as obtain answers to product configuration and functionality questions.

Dipto Chakravarty, Chief Product and Technology Officer at Black Duck, emphasized the company's commitment to leveraging AI to enhance product offerings and support customers in securely adopting AI-augmented development practices. The advancements in Black Duck Assist are designed to empower developers to build secure software more efficiently by integrating security measures directly into their workflow.

For further details, interested parties can explore the Black Duck website or watch the Black Duck Assist video. The company will also demonstrate Black Duck Assist in Code Sight at booth #5242 during the Black Hat Conference in Las Vegas on August 6-7, 2025.