Black Duck's tech stack
What does Black Duck use?
Black Duck (whitehatsec.com) uses at least 31 tools we can see from public records, including Microsoft 365 for email and documents, ZoomInfo for sales, Google Analytics for analytics and WordPress for its website. Last checked .
- Industry
- Software
- Size
- 201–1,000 employees
- Based in
- San Jose, United States
- Founded
- 2001
- Company page
- Tools found
- 31
- Categories
- 14
- Oldest proven tool
- Oct 2020
- Last checked
- Oct 2026
Black Duck's stack, layer by layer
Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.
Edge & Hosting
2 tools, where the bytes are served from
CDN & Edge
Application
7 tools, what the product is built with
Data & Observability
4 tools, what they measure and store
Go-to-market
11 tools, how they find and keep customers
Company Ops
7 tools, what the team runs on day to day
Workspace
Dev Tools
Security & Compliance
What changed at Black Duck
Using since
Dates come from the first certificate of the subdomain that points at the tool.
Black Duck tech stack FAQ
What tools does Black Duck use?
As of October 2026, runsonwhat has found 31 tools at Black Duck (whitehatsec.com) in public records. Edge & Hosting: Cloudflare and Amazon Route 53. Application: jQuery, Google Fonts and Font Awesome. Data & Observability: Google Analytics, Google Tag Manager and Microsoft Clarity. Go-to-market: WordPress, Google Ads and Yoast SEO. Company Ops: Microsoft 365, Atlassian and Let's Encrypt. Last checked October 16, 2026.
What sales tools does Black Duck use?
The sales tools runsonwhat has found at Black Duck are ZoomInfo, 6sense and Qualified (October 2026); no CRM shows up in Black Duck's public records. runsonwhat found ZoomInfo through ZoomInfo code on whitehatsec.com.
What email provider does Black Duck use?
Black Duck uses Microsoft 365 for email and office software, according to runsonwhat (October 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365 and email records. Microsoft 365 is used by 706,393 companies runsonwhat tracks.
What analytics tools does Black Duck use?
Black Duck uses Google Analytics for analytics, alongside Google Tag Manager and Microsoft Clarity, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on whitehatsec.com. Google Analytics is used by 864,286 companies runsonwhat tracks.
What is Black Duck's website built with?
Black Duck uses WordPress for its website, alongside Yoast SEO, according to runsonwhat (October 2026). runsonwhat found WordPress through WordPress code on whitehatsec.com. WordPress is used by 588,941 companies runsonwhat tracks.
What marketing software does Black Duck use?
Black Duck uses Marketo for marketing, according to runsonwhat (October 2026). runsonwhat found Marketo through a subdomain that points at Marketo and code on whitehatsec.com, and Black Duck has used it since at least October 2020. Marketo is used by 8,806 companies runsonwhat tracks.
How long has Black Duck used Marketo?
Black Duck has used Marketo since at least October 2020, going by the first public certificate of the whitehatsec.com subdomain that points at Marketo. Other long-running tools at Black Duck include Atlassian Statuspage (since July 2024).
Does Black Duck use jQuery?
Yes. runsonwhat found jQuery at Black Duck through jQuery code on whitehatsec.com. jQuery is a Frontend tool used by 905,714 companies runsonwhat tracks.
Which companies have a tech stack similar to Black Duck's?
The companies with the stacks most like Black Duck's are Wind River, Coveo, Avalara and Airdefense, according to runsonwhat (October 2026). Each shares 13 to 15 tools with Black Duck, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.
How does runsonwhat know what Black Duck uses?
runsonwhat reads public records only. Of the 31 tools at Black Duck, 22 were found through code on whitehatsec.com, 6 through DNS records, 2 through subdomains that point at the vendor and 1 through email records. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and whitehatsec.com about monthly.
We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.