Black Duck's tech stack
What does Black Duck use?
Black Duck (protecode.com) uses at least 16 tools we can see from public records, including Microsoft 365 for email and documents, Google Tag Manager for analytics, WordPress for its website and Cloudflare for content delivery. Last checked .
- Based in
- Canada
- Founded
- 2006
- Company page
- Tools found
- 16
- Categories
- 10
- Layers
- 5 of 5
- Last checked
- Oct 2026
Black Duck's stack, layer by layer
Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.
Edge & Hosting
2 tools, where the bytes are served from
CDN & Edge
Application
7 tools, what the product is built with
Data & Observability
1 tool, what they measure and store
Analytics
Go-to-market
3 tools, how they find and keep customers
Website & CMS
Marketing
Company Ops
3 tools, what the team runs on day to day
Workspace
Security & Compliance
Black Duck tech stack FAQ
What tools does Black Duck use?
We've found 16 tools at Black Duck (protecode.com). Edge & Hosting: Cloudflare and Amazon Route 53. Application: jQuery, Google Fonts and Font Awesome. Data & Observability: Google Tag Manager. Go-to-market: WordPress and Yoast SEO. Company Ops: Microsoft 365, Valimail and OneTrust. Last checked October 3, 2026.
What email provider does Black Duck use?
Black Duck uses Microsoft 365 for email and documents. We found Microsoft 365 through DNS verification records and email records.
What analytics tools does Black Duck use?
Black Duck uses Google Tag Manager for analytics. We found Google Tag Manager through website code.
What CMS does Black Duck use?
Black Duck uses WordPress and Yoast SEO for its website. We found WordPress through website code.
Does Black Duck use Microsoft 365?
Yes. We found Microsoft 365 at Black Duck through DNS verification records and email records. Microsoft 365 is used by 685,119 companies we track.
How does runsonwhat know what Black Duck uses?
We read public traces only: Black Duck's DNS and email records, certificate logs, the code its website loads, and published subprocessor lists. A tool is listed only when a direct record backs it up. DNS is rechecked weekly and the website monthly.
We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.