CanAgentUse

Saved report

https://www.blackduck.com/

SCANNED

Jun 8, 2026, 10:31 PM

VISIBILITY

Public

Rescan Report

Share Report

Copy Report Link

New Scan

https://www.blackduck.com/

SCANNED

Jun 8, 2026, 10:31:36 PMJun 8, 2026, 10:31 PM

VISIBILITY

Public

Rescan Report

Share Report

Copy Report Link

Export Report

37/100

OVERALL SCORE

Level 2, Agent-Limited

Priority improvements needed for AI agents

CAPTURED SCREENSHOT

What AI sees of your website

Application Security | Open Source Security | SAST/DAST/SCA Tools | Black Duck

Black Duck helps organizations secure their software supply chain by providing deep visibility into open source components, licenses, and vulnerabilities. Black Duck solutions help ensure compliance, accelerate development, provide clarity...

Next step

Turn this report into a fix workflow

25 failed checks are ready to move into MCP or CLI remediation. Generate a repair prompt, connect the scanner to your coding agent, or open the integration docs before your next rescan.

Detailed report scores grouped by capability area
Metric	Score	Status	Passed	Failed	Warning	Evidence
AI Discoverability	36	Priority fix	6	16	1	View details
Discoverability	57	Needs work	4	5	0	View details
Content Readiness	42	Priority fix	2	7	1	View details
Bot Access Control	0	Priority fix	0	4	0	View details
Agent Ease of Use	10	Priority fix	6	29	1	View details
API	0	Priority fix	0	6	0	View details
Auth	Not Applicable	Not Applicable	0	7	0	View details
MCP	25	Priority fix	2	6	0	View details
Skill Discovery	5	Priority fix	0	10	1	View details
Agent Commerce	Not Applicable	Not Applicable	4	0	0
GEO, AIO and AEO	77	Mostly ready	7	2	11	View details
GEO Readiness	89	Mostly ready	3	0	3
AIO Readiness	80	Mostly ready	3	1	3	View details
AEO Readiness	63	Needs work	1	1	5	View details
SEO	85	Mostly ready	9	2	0	View details
SEO	85	Mostly ready	9	2	0	View details
Security & Trust	80	Mostly ready	8	1	0	View details
Security & Trust	80	Mostly ready	4	1	0	View details
AI Training Exposure	Not Applicable	Not Applicable	4	0	0
Performance and Accessibility	26	Priority fix	18	9	0	View details
Performance	0	Priority fix	13	6	0	View details
Accessibility	74	Needs work	5	3	0	View details

Prioritized recommendations

Issues ranked by score impact

48 items need attention

Security & TrustSecurity & TrustEstablished

Referrer-Policy

Referrer-Policy is missing or incomplete.

100 Fail

Needs attention

Referrer-Policy

Failed check

Issue

Referrer-Policy is missing or incomplete.

Why it matters

Referrer-Policy controls how much URL context is sent to other origins, limiting accidental leakage of paths, queries, and identifiers.

Check name

Referrer-Policy

Score

0/100

Status

fail

Category

Security & Trust

Maturity

Established

Goal

Limit how much referrer data leaves the site.

Result

Referrer-Policy is missing or incomplete.

Evidence

{
  "header": "referrer-policy",
  "value": null
}

Agent Ease of UseAPIEstablished

API Catalog

API Catalog failed at "Fetch API catalog".

50 Fail

Needs attention

API Catalog

Failed check

Issue

The API catalog endpoint did not return HTTP 2xx.

Why it matters

API catalogs help agents find service descriptions, documentation, and status resources without guessing API entry points.

Check name

API Catalog

Score

0/100

Status

fail

Category

API

Maturity

Established

Goal

Publish an API catalog for automated API discovery using RFC 9727.

Result

API Catalog failed at "Fetch API catalog".

Validation steps

Fetch API catalog
The API catalog endpoint did not return HTTP 2xx.
Validate RFC 9727 linkset
Response is not valid JSON.
Fetch advertised API catalog targets
API Catalog did not expose any same-origin hrefs to validate.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch API catalog",
      "status": "fail",
      "evidence": {
        "statusCode": 404,
        "contentType": "text/html; charset=iso-8859-1"
      },
      "issue": "The API catalog endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/api-catalog."
    },
    {
      "id": "validate",
      "title": "Validate RFC 9727 linkset",
      "status": "fail",
      "evidence": {
        "valid": false,
        "compatibleContentType": false,
        "issue": "Response is not valid JSON.",
        "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
      },
      "issue": "Response is not valid JSON.",
      "howToFix": "Use application/linkset+json with service-desc, service-doc, and status relations that each include href."
    },
    {
      "id": "target-validation",
      "title": "Fetch advertised API catalog targets",
      "status": "fail",
      "evidence": {
        "checked": [],
        "failures": [
          {
            "reason": "No same-origin API catalog hrefs were available to fetch."
          }
        ]
      },
      "issue": "API Catalog did not expose any same-origin hrefs to validate.",
      "howToFix": "Make each same-origin API catalog href reachable and serve the advertised media type."
    }
  ]
}

Agent Ease of UseAPIEstablished

OpenAPI discovery

OpenAPI discovery failed at "Find valid OpenAPI document".

50 Fail

Needs attention

OpenAPI discovery

Failed check

Issue

OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=iso-8859-1" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.

Why it matters

OpenAPI documents let agents understand available operations, schemas, authentication, and request formats before calling an API.

Check name

OpenAPI discovery

Score

0/100

Status

fail

Category

API

Maturity

Established

Goal

Publish a valid OpenAPI or Swagger document for API discovery.

Result

OpenAPI discovery failed at "Find valid OpenAPI document".

Validation steps

Find valid OpenAPI document
OpenAPI YAML document did not match the expected shape. Content-Type "text/html; charset=iso-8859-1" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Find valid OpenAPI document",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/openapi.yaml",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/swagger.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/swagger.yaml",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/api/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/api/swagger.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          },
          {
            "path": "/docs/openapi.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "valid": false,
            "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
            "compatibleContentType": false,
            "format": "yaml",
            "version": "",
            "pathCount": 0,
            "operationCount": 0,
            "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
          }
        ]
      },
      "issue": "OpenAPI YAML document did not match the expected shape. Content-Type \"text/html; charset=iso-8859-1\" is not a recognized type; unsupported version: ; missing info block with title and version; missing paths block; no operations found.",
      "howToFix": "Publish a valid OpenAPI 3.x or Swagger 2.0 JSON/YAML document with info, paths, operations, and responses."
    }
  ]
}

AI DiscoverabilityBot Access ControlEstablished

AI bot rules in robots.txt

AI bot rules in robots.txt is missing or incomplete.

33 Fail

Needs attention

AI bot rules in robots.txt

Failed check

Issue

No specific User-agent rules found for major AI crawlers (GPTBot, ClaudeBot, etc.) in robots.txt.

Why it matters

Explicit AI bot rules reduce ambiguity for crawler operators and make training, indexing, or retrieval access policy auditable.

Check name

AI bot rules in robots.txt

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Established

Goal

Add User-agent rules for AI crawlers like GPTBot, Claude-Web, and others.

Result

AI bot rules in robots.txt is missing or incomplete.

Evidence

{
  "expectedBots": [
    "GPTBot",
    "ChatGPT-User",
    "ClaudeBot",
    "Claude-Web",
    "Anthropic-AI",
    "Google-Extended",
    "PerplexityBot",
    "CCBot",
    "Applebot-Extended",
    "Meta-ExternalAgent",
    "Bytespider",
    "Amazonbot",
    "Cohere-AI"
  ],
  "configuredBots": []
}

AI DiscoverabilityBot Access ControlInformational

Content Signal

Content Signal is missing or incomplete.

33 Fail

Needs attention

Content Signal

Failed check

Issue

No Content Signal found in robots.txt

Why it matters

Content Signal provides a machine-readable way to communicate AI usage preferences where participating crawlers look for policy.

Check name

Content Signal

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Informational

Goal

Declare AI content usage preferences with Content Signal in robots.txt.

Result

Content Signal is missing or incomplete.

Evidence

{
  "signals": [],
  "ai-train": false,
  "search": false,
  "ai-input": false
}

AI DiscoverabilityDiscoverabilityEstablished

FAQPage schema

FAQPage schema is missing or incomplete.

33 Fail

Needs attention

FAQPage schema

Failed check

Issue

FAQ content was detected but no FAQPage schema was found.

Why it matters

FAQPage schema lets agents extract visible question-and-answer content cleanly and avoid guessing which text is an answer.

Check name

FAQPage schema

Score

0/100

Status

fail

Category

Discoverability

Maturity

Established

Goal

Expose question-and-answer content in FAQPage structured data when FAQs are present.

Result

FAQPage schema is missing or incomplete.

Evidence

{
  "found": false,
  "visibleFaq": true,
  "allTypes": [
    "Organization",
    "WebSite"
  ]
}

AI DiscoverabilityDiscoverabilityEstablished

High-value schema types

High-value schema types is missing or incomplete.

33 Fail

Needs attention

High-value schema types

Failed check

Issue

No high-value schema types (e.g. Article, Product, Service) were found.

Why it matters

High-value schema types tell agents whether a page is an article, product, event, service, or other actionable content type.

Check name

High-value schema types

Score

0/100

Status

fail

Category

Discoverability

Maturity

Established

Goal

Use schema types that describe the page's primary content or offering.

Result

High-value schema types is missing or incomplete.

Evidence

{
  "found": [],
  "expected": [
    "Article",
    "BlogPosting",
    "NewsArticle",
    "Product",
    "SoftwareApplication",
    "FAQPage",
    "LocalBusiness",
    "VideoObject",
    "HowTo",
    "Event",
    "Course",
    "Review",
    "Service"
  ],
  "allTypes": [
    "Organization",
    "WebSite"
  ]
}

AI DiscoverabilityDiscoverabilityEstablished

Link headers

Link headers failed at "Find useful Link headers".

33 Fail

Needs attention

Link headers

Failed check

Issue

No useful agent discovery Link headers were found.

Why it matters

Link headers let automated clients discover API catalogs, documentation, and machine-readable alternates without parsing page markup first.

Check name

Link headers

Score

0/100

Status

fail

Category

Discoverability

Maturity

Established

Goal

Include Link response headers for agent discovery using RFC 8288.

Result

Link headers failed at "Find useful Link headers".

Validation steps

Find useful Link headers
No useful agent discovery Link headers were found.
Fetch same-origin Link header targets
Link headers did not expose any same-origin targets to validate.

Evidence

{
  "failedStep": "presence",
  "steps": [
    {
      "id": "presence",
      "title": "Find useful Link headers",
      "status": "fail",
      "evidence": {
        "links": []
      },
      "issue": "No useful agent discovery Link headers were found.",
      "howToFix": "Expose useful Link headers such as rel=\"api-catalog\", rel=\"service-doc\", and rel=\"service-desc\"."
    },
    {
      "id": "target-validation",
      "title": "Fetch same-origin Link header targets",
      "status": "fail",
      "evidence": {
        "checked": [],
        "failures": [
          {
            "reason": "No same-origin Link header targets were available to fetch."
          }
        ]
      },
      "issue": "Link headers did not expose any same-origin targets to validate.",
      "howToFix": "Make each same-origin Link href reachable and serve the advertised media type."
    }
  ]
}

Agent Ease of UseMCPEmerging recommendation

MCP Server Card

MCP Server Card failed at "Fetch to find resource".

33 Fail

Needs attention

MCP Server Card

Failed check

Issue

MCP Server Card was not found at the expected path.

Why it matters

MCP Server Cards help agents discover server transports, capabilities, and protocol details before opening an MCP session.

Check name

MCP Server Card

Score

0/100

Status

fail

Category

MCP

Maturity

Emerging recommendation

Goal

Publish an MCP Server Card for agent discovery.

Result

MCP Server Card failed at "Fetch to find resource".

Validation steps

Fetch to find resource
MCP Server Card was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/mcp/server-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/mcp/server-cards.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "MCP Server Card was not found at the expected path.",
      "howToFix": "Publish an MCP server card with valid transports and make each advertised local endpoint answer an MCP initialize request."
    }
  ]
}

Agent Ease of UseMCPEmerging recommendation

mcp.json

mcp.json failed at "Fetch to find resource".

33 Fail

Needs attention

mcp.json

Failed check

Issue

mcp.json was not found at the expected path.

Why it matters

MCP clients need trustworthy server metadata, protocol version, transport details, and capability hints before connecting to a remote MCP server.

Check name

mcp.json

Score

0/100

Status

fail

Category

MCP

Maturity

Emerging recommendation

Goal

Expose a stable MCP server metadata document that points agents to the site's MCP endpoint.

Result

mcp.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
mcp.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/mcp/server-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "mcp.json was not found at the expected path.",
      "howToFix": "Publish mcp.json or an MCP server card with serverInfo, protocolVersion, transport endpoint, and capabilities."
    }
  ]
}

AI DiscoverabilityBot Access ControlInformational

Web Bot Auth request signing

Web Bot Auth request signing failed at "Fetch to find resource".

33 Fail

Needs attention

Web Bot Auth request signing

Failed check

Issue

Web Bot Auth request signing was not found at the expected path.

Why it matters

Web Bot Auth discovery lets servers and clients find signing keys for bot identity workflows based on HTTP Message Signatures.

Check name

Web Bot Auth request signing

Score

0/100

Status

fail

Category

Bot Access Control

Maturity

Informational

Goal

Advertise HTTP Message Signatures keys when this site operates signed bot clients or supports Web Bot Auth workflows.

Result

Web Bot Auth request signing failed at "Fetch to find resource".

Validation steps

Fetch to find resource
Web Bot Auth request signing was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/http-message-signatures-directory",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "Web Bot Auth request signing was not found at the expected path.",
      "howToFix": "If publishing Web Bot Auth keys, return a JSON key directory with a non-empty keys array and the draft media type."
    }
  ]
}

Agent Ease of UseMCPInformational

WebMCP manifest

WebMCP manifest failed at "Fetch to find resource".

33 Fail

Needs attention

WebMCP manifest

Failed check

Issue

WebMCP manifest was not found at the expected path.

Why it matters

A WebMCP manifest advertises browser-exposed tools declaratively so agents can understand available site actions before invoking them.

Check name

WebMCP manifest

Score

0/100

Status

fail

Category

MCP

Maturity

Informational

Goal

Publish a WebMCP manifest for declarative browser tool discovery when using the draft manifest convention.

Result

WebMCP manifest failed at "Fetch to find resource".

Validation steps

Fetch to find resource
WebMCP manifest was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/webmcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/mcp.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "WebMCP manifest was not found at the expected path.",
      "howToFix": "Keep declarative WebMCP manifest discovery informational until the manifest shape stabilizes; validate tools if you publish one."
    }
  ]
}

AI DiscoverabilityContent ReadinessEmerging recommendation

llms.txt

llms.txt failed at "Fetch to find resource".

25 Fail

Needs attention

llms.txt

Failed check

Issue

llms.txt was not found at the expected path.

Why it matters

llms.txt gives language-model clients a concise, curated summary of important site context and links before they crawl broadly.

Check name

llms.txt

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Emerging recommendation

Goal

Publish llms.txt to summarize agent-readable site guidance.

Result

llms.txt failed at "Fetch to find resource".

Validation steps

Fetch to find resource
llms.txt was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/llms.txt",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/llms-full.txt",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "llms.txt was not found at the expected path.",
      "howToFix": "Publish /llms.txt as Markdown with a clear title, concise site summary, and useful links for agents."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Markdown negotiation

Markdown negotiation failed at "Markdown content type".

25 Fail

Needs attention

Markdown negotiation

Failed check

Issue

Content-Type "text/html;charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.

Why it matters

Markdown negotiation gives agents a cleaner representation of page content while preserving normal HTML for browsers.

Check name

Markdown negotiation

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Established

Goal

Return HTML responses as markdown when agents request it.

Result

Markdown negotiation failed at "Markdown content type".

Validation steps

Markdown content type
Content-Type "text/html;charset=utf-8" does not indicate Markdown when requested with Accept: text/markdown.
Vary: Accept header
Markdown negotiation is missing Vary: Accept; current Vary header is "Accept-Encoding,User-Agent".
Structured Markdown body
Markdown response is missing a heading.

Evidence

{
  "failedStep": "content-type",
  "steps": [
    {
      "id": "content-type",
      "title": "Markdown content type",
      "status": "fail",
      "evidence": {
        "statusCode": 200,
        "contentType": "text/html;charset=utf-8"
      },
      "issue": "Content-Type \"text/html;charset=utf-8\" does not indicate Markdown when requested with Accept: text/markdown.",
      "howToFix": "Return Content-Type: text/markdown; charset=utf-8 for requests with Accept: text/markdown."
    },
    {
      "id": "vary-accept",
      "title": "Vary: Accept header",
      "status": "fail",
      "evidence": {
        "vary": "Accept-Encoding,User-Agent"
      },
      "issue": "Markdown negotiation is missing Vary: Accept; current Vary header is \"Accept-Encoding,User-Agent\".",
      "howToFix": "Add Vary: Accept on negotiated Markdown responses so shared caches keep HTML and Markdown variants separate."
    },
    {
      "id": "markdown-content",
      "title": "Structured Markdown body",
      "status": "fail",
      "evidence": {
        "valid": false,
        "hasHeading": false,
        "wordCount": 25577,
        "excerpt": "<!DOCTYPE HTML>\n\n   \n\n      <html lang=\"en\">\n      \n      \n\n      <head>\n\t\n\t<!-- OneTrust Cookies Consent Notice start for blackduck.com -->\n<meta name=\"content-page-ref\" content=\"A5lx_dywVH3nWJa0RaN7WQBsGjl1stvg59oQ-mlG_723tPBhOzycNAOkqXs-",
        "issue": "Markdown response is missing a heading."
      },
      "issue": "Markdown response is missing a heading.",
      "howToFix": "Return Markdown with at least one heading and substantive page content, including useful links or instructions for agents."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Semantic HTML

Semantic HTML is missing or incomplete.

25 Fail

Needs attention

Semantic HTML

Failed check

Issue

Semantic HTML is incomplete: missing <main> landmark; skipped heading levels; 1 links missing accessible names; 4 buttons missing accessible names.

Details

Why it matters

Semantic HTML gives browsers, assistive technology, search systems, and agents reliable landmarks, headings, controls, form semantics, and image context.

Check name

Semantic HTML

Score

0/100

Status

fail

Category

Content Readiness

Maturity

Established

Goal

Expose readable page structure through semantic HTML and accessible controls.

Result

Semantic HTML is missing or incomplete.

Evidence

{
  "main": false,
  "nav": true,
  "footer": true,
  "meaningfulH1": true,
  "headingOrder": false,
  "accessibleLinks": false,
  "accessibleButtons": false,
  "imageAltCoverage": true,
  "formAutocompleteCoverage": true,
  "details": {
    "inaccessibleLinks": [
      "<a href=\"/\"> <div class=\"component-image\"> <div data-asset-id=\"c4d3eae7-102f-4046-a1ed-0b89c0ecbfca\" id=\"siteFooter-c9f9616922\" class=\"cmp-image\" itemscope itemtype=\"http://schema.org/ImageObject\"> <img srcset=\"/content/experience-fragments/black-duck/en-us/global/common/footer/footer/_jcr_content/root/sitefooter_copy_copy.coreimg.82.375.png/1772137597520/black-duck-logo.png 375w,/content/experience-fragments/black-duck/en-us/global/common/footer/footer/_jcr_content/root/sitefooter_copy_copy.cor"
    ],
    "inaccessibleButtons": [
      "<button class=\"hamburger\"></button>",
      "<button class=\"close-icon\"></button>",
      "<button type=\"button\" class=\"slick-prev arrow-bottom slick-arrow\" disabled></button>",
      "<button type=\"button\" class=\"slick-next arrow-bottom slick-arrow\"></button>"
    ],
    "missingAutocompleteInputs": [],
    "imagesMissingAlt": [],
    "skippedHeadingLevels": [
      "h3: Products & Services",
      "h6: ContextAI™: The model for building secure software.",
      "h6: ContextAI™: The model for building secure software.",
      "h6: Introducing Black Duck Signal™: Security at the speed of AI",
      "h6: BSIMM16: Key trends and activities for you to benchmark your own program",
      "h3: Solutions",
      "h6: The Global State of DevSecOps",
      "h6: Introducing Black Duck Signal™: Security at the speed of AI",
      "h6: Navigating the EU Cyber Resilience Act",
      "h6: Navigating the EU Cyber Resilience Act",
      "h3: Resources",
      "h6: Learn why Black Duck is a Leader for the eighth year in a row",
      "h6: Black Duck Customer Value Study",
      "h6: Learn why Black Duck is a Leader for the eighth year in a row",
      "h3: Company",
      "h6: Learn why Black Duck is a Leader for the eighth year in a row",
      "h6: Introducing Black Duck Signal™: Security at the speed of AI",
      "h1: Complete ApplicationSecurity.",
      "h2: Backed by 20+ years of human-verified intelligence",
      "h2: Address the new era of software development",
      "h2: Build secure code at AI speed",
      "h2: Strengthen software supply chain security",
      "h2: Deliver code quality and compliance",
      "h2: The recognized leader in software security",
      "h2: A Magic Quadrant™ Leader for the Eighth Consecutive Time",
      "h5: We would strongly recommend the Black Duck AST tools to all enterprises, especially those specializing in embedded systems where code quality is of paramount importance.”",
      "h5: Polaris delivers measurable operational efficiency and faster decision-making by providing a unified, scalable platform that transforms raw industrial data into real-time, actionable insights.”",
      "h2: True Scale Application Security",
      "h4: Black Duck Polaris Platform",
      "h4: Black Duck Signal™",
      "h4: Coverity® Static Analysis",
      "h4: Black Duck® SCA",
      "h2: The model for building secure software",
      "h2: Insights from 20+ years shaping the future of AppSec",
      "h3: Ready to see how Black Duck can secure your entire SDLC?",
      "h5: Application security that scales with you. Meet the demands of modern software in a regulated, AI-powered world.",
      "h2: FAQ"
    ]
  },
  "counts": {
    "h1": 1,
    "headings": 37,
    "links": 223,
    "inaccessibleLinks": 1,
    "buttons": 5,
    "inaccessibleButtons": 4,
    "images": 76,
    "imagesWithAlt": 76,
    "autocompleteInputs": 0,
    "inputsWithAutocomplete": 0,
    "missingAutocompleteInputs": 0
  }
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

A2A Agent Card

A2A Agent Card failed at "Fetch to find resource".

20 Fail

Needs attention

A2A Agent Card

Failed check

Issue

A2A Agent Card was not found at the expected path.

Why it matters

A2A Agent Cards let compatible clients discover agent skills, input and output modes, and the endpoint used to invoke those skills.

Check name

A2A Agent Card

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish an agent card so A2A-compatible clients can discover capabilities.

Result

A2A Agent Card failed at "Fetch to find resource".

Validation steps

Fetch to find resource
A2A Agent Card was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/a2a/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/agent-card.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "A2A Agent Card was not found at the expected path.",
      "howToFix": "Publish an A2A Agent Card with required skill details and make the advertised url answer A2A JSON-RPC requests."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

Agent Skills index

Agent Skills index failed at "Fetch to find resource".

20 Fail

Needs attention

Agent Skills index

Failed check

Issue

Agent Skills index was not found at the expected path.

Why it matters

An Agent Skills index lets clients find task-specific SKILL.md documents that describe how to use site capabilities correctly.

Check name

Agent Skills index

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish an agent skills discovery index.

Result

Agent Skills index failed at "Fetch to find resource".

Validation steps

Fetch to find resource
Agent Skills index was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent-skills/index.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/skills/index.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "Agent Skills index was not found at the expected path.",
      "howToFix": "Publish an index with a non-empty skills array and reachable SKILL.md URLs."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

agent.json

agent.json failed at "Fetch to find resource".

20 Fail

Needs attention

agent.json

Failed check

Issue

agent.json was not found at the expected path.

Why it matters

agent.json is an emerging machine-readable manifest for declaring what a website does, how agents authenticate, and which actions or protocols are available.

Check name

agent.json

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish the singular Agent Web Protocol agent.json manifest without confusing it with the separate agents.json directory convention.

Result

agent.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
agent.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/agent.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "agent.json was not found at the expected path.",
      "howToFix": "Publish agent.json with awp_version, domain, intent, and typed actions that point to real same-origin API or protocol endpoints."
    }
  ]
}

Agent Ease of UseSkill DiscoveryInformational

agents.json

agents.json failed at "Fetch to find resource".

20 Fail

Needs attention

agents.json

Failed check

Issue

agents.json was not found at the expected path.

Why it matters

agents.json gives clients a simple directory of agent-facing capabilities and contacts when a site chooses to advertise them.

Check name

agents.json

Score

0/100

Status

fail

Category

Skill Discovery

Maturity

Informational

Goal

Publish an agents.json directory for agent-facing capabilities and contacts when using this convention.

Result

agents.json failed at "Fetch to find resource".

Validation steps

Fetch to find resource
agents.json was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/agents.json",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "agents.json was not found at the expected path.",
      "howToFix": "If this site uses agents.json, publish JSON with an agents array containing name and url for each agent."
    }
  ]
}

Agent Ease of UseSkill DiscoveryEmerging recommendation

DNS-AID Agent Discovery

DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".

15 Fail

Needs attention

DNS-AID Agent Discovery

Failed check

Issue

No DNS-AID entrypoint records were found under _agents.

Why it matters

DNS-AID lets agents discover index, A2A, and other agent entrypoints before fetching HTTP metadata, while DNSSEC can authenticate the discovery zone.

Check name

DNS-AID Agent Discovery

Score

25/100

Status

fail

Category

Skill Discovery

Maturity

Emerging recommendation

Goal

Publish DNS for AI Discovery records under _agents for DNS-based agent entrypoint discovery.

Result

DNS-AID Agent Discovery failed at "Resolve DNS-AID SVCB/HTTPS records".

Validation steps

Resolve DNS-AID SVCB/HTTPS records
No DNS-AID entrypoint records were found under _agents.
Validate alpn and endpoint parameters
Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint.
Check DNSSEC material
DNSSEC material was not visible for the hostname or parent zone from this resolver.

Evidence

{
  "failedStep": "svcb-https-records",
  "steps": [
    {
      "id": "svcb-https-records",
      "title": "Resolve DNS-AID SVCB/HTTPS records",
      "status": "fail",
      "evidence": {
        "hostname": "www.blackduck.com",
        "probes": [
          {
            "name": "_index._agents.www.blackduck.com",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          },
          {
            "name": "_a2a._agents.www.blackduck.com",
            "found": false,
            "recordCount": 1,
            "records": [],
            "hasAlpn": false,
            "hasEndpoint": false
          }
        ]
      },
      "issue": "No DNS-AID entrypoint records were found under _agents.",
      "howToFix": "Publish ServiceMode SVCB/HTTPS records such as _index._agents.example.com or _a2a._agents.example.com."
    },
    {
      "id": "service-params",
      "title": "Validate alpn and endpoint parameters",
      "status": "informational",
      "evidence": {
        "discovered": []
      },
      "howToFix": "Include alpn and endpoint service parameters in each DNS-AID record so agents know the protocol and target entrypoint."
    },
    {
      "id": "dnssec",
      "title": "Check DNSSEC material",
      "status": "warning",
      "evidence": {
        "hasDnssecMaterial": false,
        "checked": [
          {
            "name": "www.blackduck.com",
            "dnssecTypes": [],
            "dnssecRecordCount": 0
          },
          {
            "name": "blackduck.com",
            "dnssecTypes": [],
            "dnssecRecordCount": 0
          }
        ]
      },
      "issue": "DNSSEC material was not visible for the hostname or parent zone from this resolver.",
      "howToFix": "Sign the public discovery zone with DNSSEC so validating resolvers can return authenticated data."
    }
  ]
}

AI DiscoverabilityContent ReadinessEstablished

Content freshness signals

Content freshness signals is partially implemented.

13 Warning

Needs attention

Content freshness signals

Warning

Issue

Content freshness signals are incomplete: missing dateModified/datePublished in JSON-LD.

Why it matters

Freshness signals help agents decide whether content is current enough to cite, summarize, or compare against newer sources.

Check name

Content freshness signals

Score

50/100

Status

warning

Category

Content Readiness

Maturity

Established

Goal

Expose modified and published dates for freshness-aware retrieval and ranking.

Result

Content freshness signals is partially implemented.

Evidence

{
  "lastModified": "Mon, 08 Jun 2026 16:59:04 GMT",
  "schemaDates": [],
  "metaDateCount": 1,
  "timeDateCount": 0
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Source and trust signals

AIO: Source and trust signals scored 40/100 and needs a fix.

9 Fail

Needs attention

AIO: Source and trust signals

Failed check

Issue

Missing AIO trust signals: author, publisher, freshnessDate.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Source and trust signals

Score

40/100

Status

fail

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Source and trust signals scored 40/100 and needs a fix.

Evidence

{
  "signals": {
    "author": false,
    "publisher": false,
    "freshnessDate": false,
    "aboutOrContact": true,
    "policyLinks": true
  },
  "missing": [
    "author",
    "publisher",
    "freshnessDate"
  ],
  "authorMeta": "",
  "schemaAuthors": [],
  "schemaPublishers": [],
  "schemaDates": [],
  "visibleDates": [],
  "aboutLinks": [
    {
      "href": "#",
      "text": "Company",
      "html": "<a href=\"#\" class=\"dropdown-toggle level-1\" data-toggle=\"dropdown\" aria-haspopup aria-expanded=\"false\"> Company </a>"
    },
    {
      "href": "/company.html",
      "text": "About Black Duck",
      "html": "<a href=\"/company.html\"> About Black Duck </a>"
    },
    {
      "href": "/company/leadership.html",
      "text": "Leadership",
      "html": "<a href=\"/company/leadership.html\"> Leadership </a>"
    },
    {
      "href": "/company/careers.html",
      "text": "Careers",
      "html": "<a href=\"/company/careers.html\"> Careers </a>"
    },
    {
      "href": "https://www.linkedin.com/company/black-duck-software/",
      "text": "",
      "html": "<a href=\"https://www.linkedin.com/company/black-duck-software/\" title=\"Linkedin\" target=\"_blank\"> <span class=\"fa-stack custom-social-icon\"> <i class=\"fa-brands fa-linkedin-in\"></i> </span> </a>"
    },
    {
      "href": "/company.html",
      "text": "About Black Duck",
      "html": "<a href=\"/company.html\">About Black Duck</a>"
    },
    {
      "href": "/company/careers.html",
      "text": "Careers",
      "html": "<a href=\"/company/careers.html\">Careers</a>"
    },
    {
      "href": "/company/locations.html",
      "text": "Office Locations",
      "html": "<a href=\"/company/locations.html\">Office Locations</a>"
    },
    {
      "href": "/company/legal.html",
      "text": "Agreements",
      "html": "<a href=\"/company/legal.html\" target=\"_blank\" rel=\"noreferrer noopener\">Agreements</a>"
    },
    {
      "href": "/company/legal/privacy-policy.html",
      "text": "Privacy",
      "html": "<a href=\"/company/legal/privacy-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy</a>"
    },
    {
      "href": "/company/legal/vulnerability-disclosure-policy.html",
      "text": "Security",
      "html": "<a href=\"/company/legal/vulnerability-disclosure-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Security</a>"
    }
  ],
  "contactLinks": [
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\">Support</a>"
    },
    {
      "href": "/customer-success.html",
      "text": "Customer Success & Support",
      "html": "<a href=\"/customer-success.html\"> Customer Success &amp; Support </a>"
    },
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\"> Support </a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact Sales",
      "html": "<a href=\"/contact-sales.html\"> Contact Sales </a>"
    },
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\">Support</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "https://www.blackduck.com/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"https://www.blackduck.com/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Demos",
      "html": "<a href=\"/contact-sales.html\">Demos</a>"
    },
    {
      "href": "https://community.blackduck.com/s/",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com/s/\" target=\"_blank\" rel=\"noreferer noopener\">Support</a>"
    }
  ],
  "privacyLinks": [
    {
      "href": "/company/legal/privacy-policy.html",
      "text": "Privacy",
      "html": "<a href=\"/company/legal/privacy-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy</a>"
    }
  ],
  "score": 40,
  "weight": 20
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer evidence and trust

AEO: Answer evidence and trust scored 40/100 and needs a fix.

5 Fail

Needs attention

AEO: Answer evidence and trust

Failed check

Issue

Missing AIO trust signals: author, publisher, freshnessDate.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer evidence and trust

Score

40/100

Status

fail

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer evidence and trust scored 40/100 and needs a fix.

Evidence

{
  "signals": {
    "author": false,
    "publisher": false,
    "freshnessDate": false,
    "aboutOrContact": true,
    "policyLinks": true
  },
  "missing": [
    "author",
    "publisher",
    "freshnessDate"
  ],
  "authorMeta": "",
  "schemaAuthors": [],
  "schemaPublishers": [],
  "schemaDates": [],
  "visibleDates": [],
  "aboutLinks": [
    {
      "href": "#",
      "text": "Company",
      "html": "<a href=\"#\" class=\"dropdown-toggle level-1\" data-toggle=\"dropdown\" aria-haspopup aria-expanded=\"false\"> Company </a>"
    },
    {
      "href": "/company.html",
      "text": "About Black Duck",
      "html": "<a href=\"/company.html\"> About Black Duck </a>"
    },
    {
      "href": "/company/leadership.html",
      "text": "Leadership",
      "html": "<a href=\"/company/leadership.html\"> Leadership </a>"
    },
    {
      "href": "/company/careers.html",
      "text": "Careers",
      "html": "<a href=\"/company/careers.html\"> Careers </a>"
    },
    {
      "href": "https://www.linkedin.com/company/black-duck-software/",
      "text": "",
      "html": "<a href=\"https://www.linkedin.com/company/black-duck-software/\" title=\"Linkedin\" target=\"_blank\"> <span class=\"fa-stack custom-social-icon\"> <i class=\"fa-brands fa-linkedin-in\"></i> </span> </a>"
    },
    {
      "href": "/company.html",
      "text": "About Black Duck",
      "html": "<a href=\"/company.html\">About Black Duck</a>"
    },
    {
      "href": "/company/careers.html",
      "text": "Careers",
      "html": "<a href=\"/company/careers.html\">Careers</a>"
    },
    {
      "href": "/company/locations.html",
      "text": "Office Locations",
      "html": "<a href=\"/company/locations.html\">Office Locations</a>"
    },
    {
      "href": "/company/legal.html",
      "text": "Agreements",
      "html": "<a href=\"/company/legal.html\" target=\"_blank\" rel=\"noreferrer noopener\">Agreements</a>"
    },
    {
      "href": "/company/legal/privacy-policy.html",
      "text": "Privacy",
      "html": "<a href=\"/company/legal/privacy-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy</a>"
    },
    {
      "href": "/company/legal/vulnerability-disclosure-policy.html",
      "text": "Security",
      "html": "<a href=\"/company/legal/vulnerability-disclosure-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Security</a>"
    }
  ],
  "contactLinks": [
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\">Support</a>"
    },
    {
      "href": "/customer-success.html",
      "text": "Customer Success & Support",
      "html": "<a href=\"/customer-success.html\"> Customer Success &amp; Support </a>"
    },
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\"> Support </a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact Sales",
      "html": "<a href=\"/contact-sales.html\"> Contact Sales </a>"
    },
    {
      "href": "https://community.blackduck.com",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com\" target=\"_blank\">Support</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "https://www.blackduck.com/contact-sales.html",
      "text": "Contact sales",
      "html": "<a href=\"https://www.blackduck.com/contact-sales.html\">Contact sales</a>"
    },
    {
      "href": "/contact-sales.html",
      "text": "Demos",
      "html": "<a href=\"/contact-sales.html\">Demos</a>"
    },
    {
      "href": "https://community.blackduck.com/s/",
      "text": "Support",
      "html": "<a href=\"https://community.blackduck.com/s/\" target=\"_blank\" rel=\"noreferer noopener\">Support</a>"
    }
  ],
  "privacyLinks": [
    {
      "href": "/company/legal/privacy-policy.html",
      "text": "Privacy",
      "html": "<a href=\"/company/legal/privacy-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy</a>"
    }
  ],
  "score": 40,
  "weight": 22
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

GEO: Entity clarity

GEO: Entity clarity scored 80/100 and needs improvement.

4 Warning

Needs attention

GEO: Entity clarity

Warning

Issue

Title/H1 terms missing from description: application, security, sast, dast, sca, tools, complete, applicationsecurity.

Details

Why it matters

Generative engines favor pages with self-contained answer passages, clear entities, structured data, summaries, FAQ patterns, and crawler-accessible HTML that can be cited without extra interpretation.

Check name

GEO: Entity clarity

Score

80/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for AI answer engines to extract, cite, and attribute.

Result

GEO: Entity clarity scored 80/100 and needs improvement.

Evidence

{
  "title": "Application Security | Open Source Security | SAST/DAST/SCA Tools | Black Duck",
  "h1": "Complete ApplicationSecurity.",
  "description": "Black Duck helps organizations secure their software supply chain by providing deep visibility into open source components, licenses, and vulnerabilities. Black Duck solutions help ensure compliance, accelerate development, provide clarity into AI coding, and prevent costly security events.",
  "topicOverlap": 0.3333333333333333,
  "topicTerms": [
    "application",
    "security",
    "open",
    "source",
    "sast",
    "dast",
    "sca",
    "tools",
    "black",
    "duck",
    "complete",
    "applicationsecurity"
  ],
  "descriptionTerms": [
    "black",
    "duck",
    "helps",
    "organizations",
    "secure",
    "their",
    "software",
    "supply",
    "chain",
    "providing",
    "deep",
    "visibility",
    "into",
    "open",
    "source",
    "components",
    "licenses",
    "vulnerabilities"
  ],
  "missingFromDescription": [
    "application",
    "security",
    "sast",
    "dast",
    "sca",
    "tools",
    "complete",
    "applicationsecurity"
  ],
  "score": 80,
  "weight": 28
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer-first sections

AEO: Answer-first sections scored 65/100 and needs improvement.

4 Warning

Needs attention

AEO: Answer-first sections

Warning

Issue

14 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer-first sections

Score

65/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer-first sections scored 65/100 and needs improvement.

Evidence

{
  "sectionCount": 16,
  "passing": 2,
  "failing": [
    {
      "heading": "Products & Services",
      "headingHtml": "<h3 class=\"xs-only\"><span>Products &amp; Services</span> </h3>",
      "firstParagraph": "Integrated SaaS Application Security and Risk Management platform.",
      "paragraphHtml": "<p class=\"nav-link-description\">Integrated SaaS Application Security and Risk Management platform.</p>",
      "words": 8,
      "direct": false,
      "issue": "First paragraph is 8 words and does not look like a concise direct answer."
    },
    {
      "heading": "Solutions",
      "headingHtml": "<h3 class=\"xs-only\"><span>Solutions</span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Resources",
      "headingHtml": "<h3 class=\"xs-only\"><span>Resources</span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Company",
      "headingHtml": "<h3 class=\"xs-only\"><span>Company</span> </h3>",
      "firstParagraph": "Sorry, not available in this language yet",
      "paragraphHtml": "<p class=\"noLanguage\">Sorry, not available in this language yet</p>",
      "words": 7,
      "direct": false,
      "issue": "First paragraph is 7 words and does not look like a concise direct answer."
    },
    {
      "heading": "Backed by 20+ years of human-verified intelligence",
      "headingHtml": "<h2>Backed by&#xa0;<span class=\"text-color-orange\">20+ years</span> of human-verified intelligence</h2>",
      "firstParagraph": "4,000+ organizations choose Black Duck for unmatched software risk insight.",
      "paragraphHtml": "<p>4,000+ organizations choose Black Duck for unmatched software risk insight.</p>",
      "words": 11,
      "direct": false,
      "issue": "First paragraph is 11 words and does not look like a concise direct answer."
    },
    {
      "heading": "Address the new era of software development",
      "headingHtml": "<h2>Address the new era of <span class=\"text-color-synopsys-purple\">software development</span></h2>",
      "firstParagraph": "95%",
      "paragraphHtml": "<p class=\"text-color-synopsys-purple h2\"><b>95%</b></p>",
      "words": 1,
      "direct": false,
      "issue": "First paragraph is 1 words and does not look like a concise direct answer."
    },
    {
      "heading": "Build secure code at AI speed",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> Build secure code at AI speed </h2>",
      "firstParagraph": "When innovation moves fast, your security must move faster. Accelerate modern software development with agentic AI AppSec that secures every line of code with no friction or delay.",
      "paragraphHtml": "<p>When innovation moves fast, your security must move faster. Accelerate modern software development with agentic AI AppSec that secures every line of code with no friction or delay.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "Strengthen software supply chain security",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> Strengthen software supply chain security </h2>",
      "firstParagraph": "When every component matters, compromise isn't an option. Get total visibility and compliance, and eliminate risk across your software supply chain.",
      "paragraphHtml": "<p>When every component matters, compromise isn&apos;t an option. Get total visibility and compliance, and eliminate risk across your software supply chain.</p>",
      "words": 21,
      "direct": false,
      "issue": "First paragraph is 21 words and does not look like a concise direct answer."
    },
    {
      "heading": "The recognized leader in software security",
      "headingHtml": "<h2>The recognized <span class=\"text-color-synopsys-purple\">leader in software security</span></h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "A Magic Quadrant™ Leader for the Eighth Consecutive Time",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> A Magic Quadrant&#x2122; Leader for the Eighth Consecutive Time </h2>",
      "firstParagraph": "2025 Gartner® Magic Quadrant™ for Application Security Testing, Black Duck placed highest for Ability to Execute.",
      "paragraphHtml": "<p>2025 Gartner&#xae; Magic Quadrant&#x2122; for Application Security Testing, Black Duck placed highest for Ability to Execute.</p>",
      "words": 16,
      "direct": false,
      "issue": "First paragraph is 16 words and does not look like a concise direct answer."
    },
    {
      "heading": "True Scale Application Security",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> True Scale Application Security </h2>",
      "firstParagraph": "Black Duck has the only AppSec portfolio that unifies SAST, SCA, and AI-powered analysis into a SaaS platform. Polaris delivers real-world intelligence to detect issues across mission-critical software.",
      "paragraphHtml": "<p>Black Duck has the only AppSec portfolio that unifies SAST, SCA, and AI-powered analysis into a SaaS platform. Polaris delivers real-world intelligence to detect issues across mission-critical software.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "The model for building secure software",
      "headingHtml": "<h2><span class=\"text-color-gold\">The model </span>for building secure software</h2>",
      "firstParagraph": "Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI™ powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.",
      "paragraphHtml": "<p>Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI&#x2122; powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.</p>",
      "words": 40,
      "direct": false,
      "issue": "First paragraph is 40 words and does not look like a concise direct answer."
    },
    {
      "heading": "Insights from 20+ years shaping the future of AppSec",
      "headingHtml": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> Insights from 20+ years shaping the future of AppSec </span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "<p class=\"text-size-normal\" style=\"color: \"> </p>",
      "words": 0,
      "direct": false,
      "issue": "First paragraph is 0 words and does not look like a concise direct answer."
    },
    {
      "heading": "Ready to see how Black Duck can secure your entire SDLC?",
      "headingHtml": "<h3 class=\"title\"> <span class=\"text-size-normal\" style=\"color: #ffffff;\"> Ready to see how Black Duck can secure your entire SDLC? </span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    }
  ],
  "score": 65,
  "weight": 28
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

GEO: Explanatory content depth

GEO: Explanatory content depth scored 75/100 and needs improvement.

3 Warning

Needs attention

GEO: Explanatory content depth

Warning

Issue

18 explanatory paragraph(s) could be stronger for citation or AI extraction.

Details

Why it matters

Check name

GEO: Explanatory content depth

Score

75/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for AI answer engines to extract, cite, and attribute.

Result

GEO: Explanatory content depth scored 75/100 and needs improvement.

Evidence

{
  "candidatePassages": 19,
  "citablePassages": 1,
  "failingCandidateParagraphs": [
    {
      "index": 27,
      "heading": "H1: ",
      "text": "Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI™ powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.",
      "words": 40,
      "hasEvidence": true,
      "reasons": [
        "Too short for a citation-ready passage (40 words; target 80-220)."
      ],
      "html": "<p>Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI&#x2122; powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.</p>"
    },
    {
      "index": 31,
      "heading": "H2: FAQ",
      "text": "Black Duck is the leader in application security testing, offering True Scale Application Security that empowers organizations to build trust in their software. We provide a comprehensive suite of automated application security solutions, including agentic AI AppSec, static application security testing (SAST), dynamic application security testing (DAST), interactive application security testing (IAST), and softwar...",
      "words": 78,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (78 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck is the leader in application security testing, offering <a href=\"/blog/true-scale-application-security.html\"><u>True Scale Application Security</u></a> that empowers organizations to build trust in their software. We provide a comprehensive suite of automated application security solutions, including <a>agentic AI</a>&#xa0;AppSec, static application security testing (SAST), dynamic application security testing (DAST), interactive application security testing (IAST), and software..."
    },
    {
      "index": 32,
      "heading": "H2: FAQ",
      "text": "By integrating seamlessly into developer workflows and CI/CD pipelines, Black Duck solutions enable teams to secure proprietary and open source components as well as AI-generated code, accelerate secure software delivery, and ensure compliance with industry regulations. Black Duck provides the visibility, automation, and expert guidance necessary to manage software security risks at the speed modern businesses dem...",
      "words": 58,
      "hasEvidence": true,
      "reasons": [
        "Too short for a citation-ready passage (58 words; target 80-220)."
      ],
      "html": "<p>By integrating seamlessly into developer workflows and CI/CD pipelines, Black Duck solutions enable teams to secure proprietary and open source components as well as AI-generated code, accelerate secure software delivery, and ensure compliance with industry regulations. Black Duck provides the visibility, automation, and expert guidance necessary to manage software security risks at the speed modern businesses demand.</p>"
    },
    {
      "index": 35,
      "heading": "H2: FAQ",
      "text": "Black Duck delivers unparalleled flexibility in deploying our market-leading application security solutions, so our customers can secure their software wherever it resides and however they operate. We understand that infrastructure and compliance needs are unique, which is why we support a full spectrum of deployment models.",
      "words": 46,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (46 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck delivers unparalleled flexibility in deploying our market-leading application security solutions, so our customers can secure their software wherever it resides and however they operate. We understand that infrastructure and compliance needs are unique, which is why we support a full spectrum of deployment models.</p>"
    },
    {
      "index": 36,
      "heading": "H2: FAQ",
      "text": "Black Duck is committed to providing customers with the deployment model that best fits their operational strategy, ensuring our solutions integrate effortlessly into existing DevSecOps pipelines and security architectures. We empower you to choose the approach that maximizes efficiency, maintains compliance, and accelerates secure software delivery, without compromise.",
      "words": 48,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (48 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck is committed to providing customers with the deployment model that best fits their operational strategy, ensuring our solutions integrate effortlessly into existing DevSecOps pipelines and security architectures. We empower you to choose the approach that maximizes efficiency, maintains compliance, and accelerates secure software delivery, without compromise.</p>"
    },
    {
      "index": 37,
      "heading": "H2: FAQ",
      "text": "Black Duck Polaris™ Platform is our cutting-edge, cloud-native, unified application security platform designed to transform and accelerate secure software delivery across your enterprise. Polaris consolidates industry-leading static application security testing (SAST), software composition analysis (SCA), and dynamic application security testing (DAST) into a single, cohesive SaaS solution.",
      "words": 47,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (47 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p><a href=\"https://www.blackduck.com/platform.html\"><u>Black Duck Polaris&#x2122; Platform</u></a> is our cutting-edge, cloud-native, unified application security platform designed to transform and accelerate secure software delivery across your enterprise. Polaris consolidates industry-leading <a href=\"https://players.brightcove.net/6415867320001/EUtMdVoBg_default/index.html?videoId=6373886121112\" target=\"_blank\"><u>static application security testing (SAST)</u></a>, <a href=\"https://player..."
    },
    {
      "index": 38,
      "heading": "H2: FAQ",
      "text": "By centralizing application security testing, policy enforcement, and vulnerability management, Polaris gives teams a unified view of issues and overall risk posture, increasing efficiency and decreasing overhead. This comprehensive platform integrates seamlessly into existing developer workflows and CI/CD pipelines, and it provides unparalleled scalability and actionable insights to developers for faster, more ef...",
      "words": 83,
      "hasEvidence": false,
      "reasons": [
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>By centralizing application security testing, policy enforcement, and vulnerability management, Polaris gives teams a unified view of issues and overall risk posture, increasing efficiency and decreasing overhead. This comprehensive platform integrates seamlessly into existing developer workflows and CI/CD pipelines, and it provides unparalleled scalability and actionable insights to developers for faster, more efficient remediation. Polaris is a developer-first platform that significantly..."
    },
    {
      "index": 42,
      "heading": "H2: FAQ",
      "text": "Additionally, Black Duck supports sector-specific regulations across aerospace, defense, automotive (ISO/SAE 21434), manufacturing, financial services, and critical infrastructure. Black Duck Polaris™ Platform provides automated policy enforcement, customizable compliance reporting, and audit-ready documentation to demonstrate adherence to each framework’s specific controls and requirements, ensuring your software...",
      "words": 53,
      "hasEvidence": true,
      "reasons": [
        "Too short for a citation-ready passage (53 words; target 80-220)."
      ],
      "html": "<p>Additionally, Black Duck supports sector-specific regulations across aerospace, defense, automotive (ISO/SAE 21434), manufacturing, financial services, and critical infrastructure. <a href=\"/platform.html\"><u>Black Duck Polaris&#x2122; Platform</u></a> provides automated policy enforcement, customizable compliance reporting, and audit-ready documentation to demonstrate adherence to each framework&#x2019;s specific controls and requirements, ensuring your software is not only secure but com..."
    },
    {
      "index": 43,
      "heading": "H2: FAQ",
      "text": "Black Duck integrates seamlessly into existing DevSecOps pipelines, enabling automated security across your entire software development life cycle. We leverage native plug-ins, command-line tools, REST APIs, and webhooks to connect with popular CI/CD platforms like Jenkins, Azure DevOps, GitHub Actions, and GitLab CI.",
      "words": 44,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (44 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck integrates seamlessly into existing DevSecOps pipelines, enabling automated security across your entire software development life cycle. We leverage native plug-ins, command-line tools, REST APIs, and webhooks to connect with popular CI/CD platforms like Jenkins, Azure DevOps, GitHub Actions, and GitLab CI.</p>"
    },
    {
      "index": 46,
      "heading": "H2: FAQ",
      "text": "Black Duck Polaris™ Platform integrates directly with SCMs (including GitHub, GitLab, Bitbucket, and Azure DevOps) to enable event-driven automation for intelligent onboarding of projects, continuous discovery of new branches and repos, and natural workflow integrations. It can automatically trigger scans, so developers can integrate security seamlessly and at speed and scale.",
      "words": 51,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (51 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck Polaris&#x2122; Platform integrates directly with SCMs (including GitHub, GitLab, Bitbucket, and Azure DevOps) to enable event-driven automation for intelligent onboarding of projects, continuous discovery of new branches and repos, and natural workflow integrations. It can automatically trigger scans, so developers can integrate security seamlessly and at speed and scale.</p>"
    },
    {
      "index": 47,
      "heading": "H2: FAQ",
      "text": "Black Duck’s API-first architecture facilitates custom integrations with issue-tracking systems like Jira, container registries, and infrastructure-as-code platforms, creating a cohesive security ecosystem. This ensures continuous monitoring, portfolio-wide visibility, and adaptive security testing that scales with your organization while maintaining the velocity and automation that is essential for modern DevOps...",
      "words": 51,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (51 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck&#x2019;s API-first architecture facilitates custom integrations with issue-tracking systems like Jira, container registries, and infrastructure-as-code platforms, creating a cohesive security ecosystem. This ensures continuous monitoring, portfolio-wide visibility, and adaptive security testing that scales with your organization while maintaining the velocity and automation that is essential for modern DevOps teams.</p>"
    },
    {
      "index": 48,
      "heading": "H2: FAQ",
      "text": "Black Duck was formerly a Synopsys business unit called the Synopsys Software Integrity Group (SIG). Formed in 2015, SIG quickly emerged as the market leader in application security testing solutions. In October 2024, Synopsys sold SIG to two private equity firms, Clearlake Capital Group and Francisco Partners. This transaction established Black Duck as an independent company.",
      "words": 56,
      "hasEvidence": true,
      "reasons": [
        "Too short for a citation-ready passage (56 words; target 80-220)."
      ],
      "html": "<p>Black Duck was formerly a Synopsys business unit called the Synopsys Software Integrity Group (SIG). Formed in 2015, SIG quickly emerged as the market leader in application security testing solutions. In October 2024, Synopsys sold SIG to two private equity firms, Clearlake Capital Group and Francisco Partners. This transaction established Black Duck as an independent company.</p>"
    },
    {
      "index": 49,
      "heading": "H2: FAQ",
      "text": "Black Duck retains the full suite of market-leading application security testing solutions previously offered by SIG. As an independent entity, Black Duck is exclusively dedicated to application security, enabling faster innovation (such as the development of our transformational agentic AI solution, Signal™), enhanced customer service, and the agility to drive secure software development for our customers with gr...",
      "words": 80,
      "hasEvidence": false,
      "reasons": [
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Black Duck retains the full suite of market-leading application security testing solutions previously offered by SIG. As an independent entity, Black Duck is exclusively dedicated to application security, enabling faster innovation (such as the development of our transformational agentic AI solution, <a href=\"/signal-ai-appsec.html\"><u>Signal</u></a><a href=\"/signal-ai-appsec.html\">&#x2122;</a>), enhanced customer service, and the agility to drive secure software development for our custom..."
    },
    {
      "index": 51,
      "heading": "H2: FAQ",
      "text": "Key to this is Black Duck Assist™, an AI-powered application security assistant integrated directly into Code Sight™ IDE Plug-in. Assist provides an issue summary and an analysis of the code, so developers can see what went wrong and make a suggested fix. It flags vulnerabilities, potential IP infringements, license compliance issues, and insecure coding patterns before they are committed. This enables immediate r...",
      "words": 75,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (75 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Key to this is <a href=\"/ai-code-security-assistant.html\"><u>Black Duck Assist&#x2122;</u></a>, an AI-powered application security assistant integrated directly into <a href=\"https://www.blackduck.com/code-sight.html\"><u>Code Sight&#x2122; IDE Plug-in</u></a>. Assist provides an issue summary and an analysis of the code, so developers can see what went wrong and make a suggested fix. It flags vulnerabilities, potential IP infringements, license compliance issues, and insecure coding patter..."
    },
    {
      "index": 52,
      "heading": "H2: FAQ",
      "text": "Our AI Model Risk Insights feature within Black Duck® SCA identifies and analyzes AI models embedded within applications, providing crucial visibility into their versions, licenses, and associated security risks, even when obfuscated. We also ensure that comprehensive Software Bills of Materials include AI models.",
      "words": 44,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (44 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Our <a href=\"/blog/black-duck-ai-model-scanning.html\">AI Model Risk Insights</a> feature within <a href=\"/software-composition-analysis-tools/black-duck-sca.html\"><u>Black Duck<sup>&#xae;</sup> SCA</u></a> identifies and analyzes AI models embedded within applications, providing crucial visibility into their versions, licenses, and associated security risks, even when obfuscated. We also ensure that comprehensive Software Bills of Materials include AI models.</p>"
    },
    {
      "index": 53,
      "heading": "H2: FAQ",
      "text": "Black Duck Signal™ goes beyond traditional scanning by leveraging advanced AI to proactively identify, analyze, and mitigate complex vulnerabilities and compliance risks specifically pertinent to AI-generated code. Signal provides deeper contextual awareness and intelligent enforcement, ensuring end-to-end security and maintaining compliance standards in the new era of AI-driven software development.",
      "words": 50,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (50 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p><a href=\"/signal-ai-appsec.html\"><u>Black Duck Signal&#x2122;</u></a> goes beyond traditional scanning by leveraging advanced AI to proactively identify, analyze, and mitigate complex vulnerabilities and compliance risks specifically pertinent to AI-generated code. Signal provides deeper contextual awareness and intelligent enforcement, ensuring end-to-end security and maintaining compliance standards in the new era of AI-driven software development.</p>"
    },
    {
      "index": 55,
      "heading": "H2: FAQ",
      "text": "Coverity® Static Analysis, our market-leading SAST solution, performs deep source code examination across more than 20 programming languages and 70+ frameworks. Coverity is designed to detect a wide range of critical quality defects that impact software reliability, maintainability, and performance.",
      "words": 40,
      "hasEvidence": true,
      "reasons": [
        "Too short for a citation-ready passage (40 words; target 80-220)."
      ],
      "html": "<p><a href=\"/static-analysis-tools-sast/coverity.html\"><u>Coverity<sup>&#xae;</sup> Static Analysis</u></a>, our market-leading SAST solution, performs deep source code examination across more than 20 programming languages and 70+ frameworks. Coverity is designed to detect a wide range of critical quality defects that impact software reliability, maintainability, and performance.</p>"
    },
    {
      "index": 57,
      "heading": "H2: FAQ",
      "text": "Coverity provides built-in rule sets aligned with industry coding standards like MISRA, CERT, OWASP, and CWE, enabling Black Duck customers to enforce strict quality and security policies. With detailed, actionable reports, Coverity offers developers clear explanations and prioritized remediation guidance.",
      "words": 40,
      "hasEvidence": false,
      "reasons": [
        "Too short for a citation-ready passage (40 words; target 80-220).",
        "Missing a named source, statistic, date, percentage, report, or other evidence signal."
      ],
      "html": "<p>Coverity provides built-in rule sets aligned with industry coding standards like MISRA, CERT, OWASP, and CWE, enabling Black Duck customers to enforce strict quality and security policies. With detailed, actionable reports, Coverity offers developers clear explanations and prioritized remediation guidance.</p>"
    }
  ],
  "citableParagraphs": [
    {
      "index": 33,
      "heading": "H2: FAQ",
      "text": "Black Duck offers comprehensive software composition analysis (SCA) tools that provide complete visibility into every open source and third-party component in your applications. Our advanced detection methods can also generate and manage accurate Software Bills of Materials (SBOMs), meticulously tracking components and their versions, licenses, and security status to ensure transparency and compliance with supply...",
      "words": 113,
      "hasEvidence": true,
      "reasons": [],
      "html": "<p>Black Duck offers comprehensive <a href=\"/software-composition-analysis-tools.html\"><u>software composition analysis (SCA)</u></a> tools that provide complete visibility into every open source and third-party component in your applications. Our advanced detection methods can also generate and manage accurate Software Bills of Materials (SBOMs), meticulously tracking components and their versions, licenses, and security status to ensure transparency and compliance with supply chain regulati..."
    }
  ],
  "score": 75,
  "weight": 18
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Question-led structure

AEO: Question-led structure scored 50/100 and needs improvement.

3 Warning

Needs attention

AEO: Question-led structure

Warning

Issue

14 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Question-led structure

Score

50/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Question-led structure scored 50/100 and needs improvement.

Evidence

{
  "h2Count": 11,
  "questionH2s": [],
  "hasFaq": true,
  "score": 50,
  "weight": 18
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Answer block readiness

AIO: Answer block readiness scored 65/100 and needs improvement.

2 Warning

Needs attention

AIO: Answer block readiness

Warning

Issue

14 section(s) may benefit from a clearer opening answer; this is optional for feature/card sections.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Answer block readiness

Score

65/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Answer block readiness scored 65/100 and needs improvement.

Evidence

{
  "sectionCount": 16,
  "passing": 2,
  "failing": [
    {
      "heading": "Products & Services",
      "headingHtml": "<h3 class=\"xs-only\"><span>Products &amp; Services</span> </h3>",
      "firstParagraph": "Integrated SaaS Application Security and Risk Management platform.",
      "paragraphHtml": "<p class=\"nav-link-description\">Integrated SaaS Application Security and Risk Management platform.</p>",
      "words": 8,
      "direct": false,
      "issue": "First paragraph is 8 words and does not look like a concise direct answer."
    },
    {
      "heading": "Solutions",
      "headingHtml": "<h3 class=\"xs-only\"><span>Solutions</span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Resources",
      "headingHtml": "<h3 class=\"xs-only\"><span>Resources</span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "Company",
      "headingHtml": "<h3 class=\"xs-only\"><span>Company</span> </h3>",
      "firstParagraph": "Sorry, not available in this language yet",
      "paragraphHtml": "<p class=\"noLanguage\">Sorry, not available in this language yet</p>",
      "words": 7,
      "direct": false,
      "issue": "First paragraph is 7 words and does not look like a concise direct answer."
    },
    {
      "heading": "Backed by 20+ years of human-verified intelligence",
      "headingHtml": "<h2>Backed by&#xa0;<span class=\"text-color-orange\">20+ years</span> of human-verified intelligence</h2>",
      "firstParagraph": "4,000+ organizations choose Black Duck for unmatched software risk insight.",
      "paragraphHtml": "<p>4,000+ organizations choose Black Duck for unmatched software risk insight.</p>",
      "words": 11,
      "direct": false,
      "issue": "First paragraph is 11 words and does not look like a concise direct answer."
    },
    {
      "heading": "Address the new era of software development",
      "headingHtml": "<h2>Address the new era of <span class=\"text-color-synopsys-purple\">software development</span></h2>",
      "firstParagraph": "95%",
      "paragraphHtml": "<p class=\"text-color-synopsys-purple h2\"><b>95%</b></p>",
      "words": 1,
      "direct": false,
      "issue": "First paragraph is 1 words and does not look like a concise direct answer."
    },
    {
      "heading": "Build secure code at AI speed",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> Build secure code at AI speed </h2>",
      "firstParagraph": "When innovation moves fast, your security must move faster. Accelerate modern software development with agentic AI AppSec that secures every line of code with no friction or delay.",
      "paragraphHtml": "<p>When innovation moves fast, your security must move faster. Accelerate modern software development with agentic AI AppSec that secures every line of code with no friction or delay.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "Strengthen software supply chain security",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> Strengthen software supply chain security </h2>",
      "firstParagraph": "When every component matters, compromise isn't an option. Get total visibility and compliance, and eliminate risk across your software supply chain.",
      "paragraphHtml": "<p>When every component matters, compromise isn&apos;t an option. Get total visibility and compliance, and eliminate risk across your software supply chain.</p>",
      "words": 21,
      "direct": false,
      "issue": "First paragraph is 21 words and does not look like a concise direct answer."
    },
    {
      "heading": "The recognized leader in software security",
      "headingHtml": "<h2>The recognized <span class=\"text-color-synopsys-purple\">leader in software security</span></h2>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    },
    {
      "heading": "A Magic Quadrant™ Leader for the Eighth Consecutive Time",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> A Magic Quadrant&#x2122; Leader for the Eighth Consecutive Time </h2>",
      "firstParagraph": "2025 Gartner® Magic Quadrant™ for Application Security Testing, Black Duck placed highest for Ability to Execute.",
      "paragraphHtml": "<p>2025 Gartner&#xae; Magic Quadrant&#x2122; for Application Security Testing, Black Duck placed highest for Ability to Execute.</p>",
      "words": 16,
      "direct": false,
      "issue": "First paragraph is 16 words and does not look like a concise direct answer."
    },
    {
      "heading": "True Scale Application Security",
      "headingHtml": "<h2 class=\"title image-text-cta-title\"> True Scale Application Security </h2>",
      "firstParagraph": "Black Duck has the only AppSec portfolio that unifies SAST, SCA, and AI-powered analysis into a SaaS platform. Polaris delivers real-world intelligence to detect issues across mission-critical software.",
      "paragraphHtml": "<p>Black Duck has the only AppSec portfolio that unifies SAST, SCA, and AI-powered analysis into a SaaS platform. Polaris delivers real-world intelligence to detect issues across mission-critical software.</p>",
      "words": 28,
      "direct": false,
      "issue": "First paragraph is 28 words and does not look like a concise direct answer."
    },
    {
      "heading": "The model for building secure software",
      "headingHtml": "<h2><span class=\"text-color-gold\">The model </span>for building secure software</h2>",
      "firstParagraph": "Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI™ powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.",
      "paragraphHtml": "<p>Built on 20+ years of human-validated security intelligence, analytics, and best practices, ContextAI&#x2122; powers both our AI and traditional solutions with the essential context needed to enable security and development teams, and AI agents to build secure, high-quality software faster.</p>",
      "words": 40,
      "direct": false,
      "issue": "First paragraph is 40 words and does not look like a concise direct answer."
    },
    {
      "heading": "Insights from 20+ years shaping the future of AppSec",
      "headingHtml": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> Insights from 20+ years shaping the future of AppSec </span> </h2>",
      "firstParagraph": "",
      "paragraphHtml": "<p class=\"text-size-normal\" style=\"color: \"> </p>",
      "words": 0,
      "direct": false,
      "issue": "First paragraph is 0 words and does not look like a concise direct answer."
    },
    {
      "heading": "Ready to see how Black Duck can secure your entire SDLC?",
      "headingHtml": "<h3 class=\"title\"> <span class=\"text-size-normal\" style=\"color: #ffffff;\"> Ready to see how Black Duck can secure your entire SDLC? </span> </h3>",
      "firstParagraph": "",
      "paragraphHtml": "",
      "words": 0,
      "direct": false,
      "issue": "No paragraph follows this heading."
    }
  ],
  "score": 65,
  "weight": 8
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Page experience for AIO

AIO: Page experience for AIO scored 80/100 and needs improvement.

2 Warning

Needs attention

AIO: Page experience for AIO

Warning

Issue

63 image(s) are missing width/height attributes.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Page experience for AIO

Score

80/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Page experience for AIO scored 80/100 and needs improvement.

Evidence

{
  "viewportContent": "width=device-width, initial-scale=1.0",
  "visibleWords": 3134,
  "htmlBytes": 344861,
  "imagesMissingDimensions": [
    {
      "src": "/content/dam/black-duck/style-guide/header/BlackDuckLogo.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/style-guide/header/BlackDuckLogo.svg\" alt=\"Black Duck Logo\" class=\"logo-image\">"
    },
    {
      "src": "/content/dam/black-duck/style-guide/header/BlackDuckLogo.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/style-guide/header/BlackDuckLogo.svg\" alt=\"Black Duck Logo\" class=\"logo-image\">"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-ContextAI2.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-ContextAI2.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-ContextAI2.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-ContextAI2.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-BSIMM.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-BSIMM.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-DevSecOps.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-DevSecOps.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-EU-Cybersecurity.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-EU-Cybersecurity.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-EU-Cybersecurity.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-EU-Cybersecurity.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-User-Evidence.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-User-Evidence.png\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Gartner.svg\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/navigation/Nav-281px-Signal.jpg\" alt>"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Code.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Code.svg\" alt=\"Icon\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/AI.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/AI.svg\" alt=\"Icon\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Dependencies.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Dependencies.svg\" alt=\"Dependencies\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Prioritize.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Prioritize.svg\" alt=\"Prioritize\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Devsecops.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Devsecops.svg\" alt=\"DevSecOps\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Chart.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"element-svg-original\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Chart.svg\" alt=\"Chart\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Code.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Code.svg\" alt=\"Icon\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/AI.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/AI.svg\" alt=\"Icon\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Dependencies.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Dependencies.svg\" alt=\"Dependencies\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Prioritize.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Prioritize.svg\" alt=\"Prioritize\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Devsecops.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Devsecops.svg\" alt=\"DevSecOps\">"
    },
    {
      "src": "https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Chart.svg",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img class=\"hexagon-icon cloud-svg-animated\" src=\"https://www.blackduck.com/content/dam/black-duck/en-us/animation-icons/Chart.svg\" alt=\"Chart\">"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/1/image.coreimg.svg/1756927710256/broadinstitute-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/1/image.coreimg.svg/1756927710256/broadinstitute-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/2/image_copy.coreimg.svg/1756927731574/dhs-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/2/image_copy.coreimg.svg/1756927731574/dhs-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/3/image_copy.coreimg.svg/1759427464363/trend-micro-logo.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/3/image_copy.coreimg.svg/1759427464363/trend-micro-logo.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/4/image_copy.coreimg.svg/1756927982294/honeywell-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/4/image_copy.coreimg.svg/1756927982294/honeywell-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/5/image.coreimg.svg/1756928037394/ceva-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/5/image.coreimg.svg/1756928037394/ceva-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/6/image.coreimg.svg/1756928052040/cgi-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/6/image.coreimg.svg/1756928052040/cgi-logo-white.svg\" loading=\"lazy\" class=\"img-responsive svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/7/image_copy_copy.coreimg.svg/1756928075002/commence-formerly-doma--logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/7/image_copy_copy.coreimg.svg/1756928075002/commence-formerly-doma--logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/8/image.coreimg.svg/1756928106168/exterro-formerly-accessdata--logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/8/image.coreimg.svg/1756928106168/exterro-formerly-accessdata--logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/9/image_copy_copy.coreimg.svg/1756928115612/finra-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/9/image_copy_copy.coreimg.svg/1756928115612/finra-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/10/image_copy_copy.coreimg.svg/1756928130053/leonardo-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/10/image_copy_copy.coreimg.svg/1756928130053/leonardo-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/11/image_copy_copy.coreimg.svg/1756928142782/linx-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/11/image_copy_copy.coreimg.svg/1756928142782/linx-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/12/image_copy.coreimg.svg/1756928155158/magnet-marelli-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/12/image_copy.coreimg.svg/1756928155158/magnet-marelli-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/13/image.coreimg.svg/1756928314172/nuance-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/13/image.coreimg.svg/1756928314172/nuance-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/14/image_copy.coreimg.svg/1756928335999/olympus-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/14/image_copy.coreimg.svg/1756928335999/olympus-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/15/image_copy.coreimg.svg/1756928358087/oppo-logo-whitesvg.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/15/image_copy.coreimg.svg/1756928358087/oppo-logo-whitesvg.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/16/image_copy_copy.coreimg.svg/1756928448706/sciencelogic-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/16/image_copy_copy.coreimg.svg/1756928448706/sciencelogic-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/1/image.coreimg.svg/1756927710256/broadinstitute-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/1/image.coreimg.svg/1756927710256/broadinstitute-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/2/image_copy.coreimg.svg/1756927731574/dhs-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/2/image_copy.coreimg.svg/1756927731574/dhs-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/3/image_copy.coreimg.svg/1759427464363/trend-micro-logo.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/3/image_copy.coreimg.svg/1759427464363/trend-micro-logo.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/4/image_copy.coreimg.svg/1756927982294/honeywell-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/4/image_copy.coreimg.svg/1756927982294/honeywell-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/5/image.coreimg.svg/1756928037394/ceva-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/5/image.coreimg.svg/1756928037394/ceva-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/6/image.coreimg.svg/1756928052040/cgi-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/6/image.coreimg.svg/1756928052040/cgi-logo-white.svg\" loading=\"lazy\" class=\"img-responsive svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/7/image_copy_copy.coreimg.svg/1756928075002/commence-formerly-doma--logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/7/image_copy_copy.coreimg.svg/1756928075002/commence-formerly-doma--logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/8/image.coreimg.svg/1756928106168/exterro-formerly-accessdata--logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/8/image.coreimg.svg/1756928106168/exterro-formerly-accessdata--logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/9/image_copy_copy.coreimg.svg/1756928115612/finra-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/9/image_copy_copy.coreimg.svg/1756928115612/finra-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/10/image_copy_copy.coreimg.svg/1756928130053/leonardo-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/10/image_copy_copy.coreimg.svg/1756928130053/leonardo-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/11/image_copy_copy.coreimg.svg/1756928142782/linx-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/11/image_copy_copy.coreimg.svg/1756928142782/linx-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/12/image_copy.coreimg.svg/1756928155158/magnet-marelli-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/12/image_copy.coreimg.svg/1756928155158/magnet-marelli-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/13/image.coreimg.svg/1756928314172/nuance-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/13/image.coreimg.svg/1756928314172/nuance-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/14/image_copy.coreimg.svg/1756928335999/olympus-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/14/image_copy.coreimg.svg/1756928335999/olympus-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/15/image_copy.coreimg.svg/1756928358087/oppo-logo-whitesvg.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/15/image_copy.coreimg.svg/1756928358087/oppo-logo-whitesvg.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/16/image_copy_copy.coreimg.svg/1756928448706/sciencelogic-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/16/image_copy_copy.coreimg.svg/1756928448706/sciencelogic-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg",
      "width": "",
      "height": "",
      "loading": "lazy",
      "html": "<img src=\"/content/experience-fragments/black-duck/en-us/pages/products/software-integrity/trust-seals/trusted-customers/customer-logo-reel--dark-0/_jcr_content/root/synopsyscontainer/contentcarousel_copy/17/image_copy_copy.coreimg.svg/1756928460691/zpe-logo-white.svg\" loading=\"lazy\" class=\"img-responsive _none_ svg\" itemprop=\"contentUrl\" alt>"
    },
    {
      "src": "/content/dam/black-duck/en-us/images/logos/fpt-software-logo-opt.png",
      "width": "",
      "height": "",
      "loading": "",
      "html": "<img src=\"/content/dam/black-duck/en-us/images/logos/fpt-software-logo-opt.png\" alt=\"FPT logo\" class=\"logo\">"
    }
  ],
  "possibleDialogs": [],
  "score": 80,
  "weight": 10
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Entity and definition clarity

AEO: Entity and definition clarity scored 83/100 and needs improvement.

1 Warning

Needs attention

AEO: Entity and definition clarity

Warning

Issue

Entity or definition gaps: application, security, sast, dast, sca, tools, complete, applicationsecurity.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Entity and definition clarity

Score

83/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Entity and definition clarity scored 83/100 and needs improvement.

Evidence

{
  "title": "Application Security | Open Source Security | SAST/DAST/SCA Tools | Black Duck",
  "h1": "Complete ApplicationSecurity.",
  "description": "Black Duck helps organizations secure their software supply chain by providing deep visibility into open source components, licenses, and vulnerabilities. Black Duck solutions help ensure compliance, accelerate development, provide clarity into AI coding, and prevent costly security events.",
  "topicOverlap": 0.3333333333333333,
  "definitionCount": 18,
  "topicTerms": [
    "application",
    "security",
    "open",
    "source",
    "sast",
    "dast",
    "sca",
    "tools",
    "black",
    "duck",
    "complete",
    "applicationsecurity"
  ],
  "descriptionTerms": [
    "black",
    "duck",
    "helps",
    "organizations",
    "secure",
    "their",
    "software",
    "supply",
    "chain",
    "providing",
    "deep",
    "visibility",
    "into",
    "open",
    "source",
    "components",
    "licenses",
    "vulnerabilities"
  ],
  "missingFromDescription": [
    "application",
    "security",
    "sast",
    "dast",
    "sca",
    "tools",
    "complete",
    "applicationsecurity"
  ],
  "score": 83,
  "weight": 18
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AEO: Answer intent coverage

AEO: Answer intent coverage scored 70/100 and needs improvement.

1 Warning

Needs attention

AEO: Answer intent coverage

Warning

Issue

Missing likely AI Overview intent sections: what, how, benefits, cost, compare.

Details

Why it matters

Answer engines need concise answers, question-led structure, entity clarity, visible evidence, and trust signals that can be extracted without relying on search-only metadata checks.

Check name

AEO: Answer intent coverage

Score

70/100

Status

warning

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content easy for answer engines and assistants to answer from directly.

Result

AEO: Answer intent coverage scored 70/100 and needs improvement.

Evidence

{
  "headings": [
    {
      "text": "Backed by 20+ years of human-verified intelligence",
      "html": "<h2>Backed by&#xa0;<span class=\"text-color-orange\">20+ years</span> of human-verified intelligence</h2>"
    },
    {
      "text": "Address the new era of software development",
      "html": "<h2>Address the new era of <span class=\"text-color-synopsys-purple\">software development</span></h2>"
    },
    {
      "text": "Build secure code at AI speed",
      "html": "<h2 class=\"title image-text-cta-title\"> Build secure code at AI speed </h2>"
    },
    {
      "text": "Strengthen software supply chain security",
      "html": "<h2 class=\"title image-text-cta-title\"> Strengthen software supply chain security </h2>"
    },
    {
      "text": "Deliver code quality and compliance",
      "html": "<h2 class=\"title image-text-cta-title\"> Deliver code quality and compliance </h2>"
    },
    {
      "text": "The recognized leader in software security",
      "html": "<h2>The recognized <span class=\"text-color-synopsys-purple\">leader in software security</span></h2>"
    },
    {
      "text": "A Magic Quadrant™ Leader for the Eighth Consecutive Time",
      "html": "<h2 class=\"title image-text-cta-title\"> A Magic Quadrant&#x2122; Leader for the Eighth Consecutive Time </h2>"
    },
    {
      "text": "True Scale Application Security",
      "html": "<h2 class=\"title image-text-cta-title\"> True Scale Application Security </h2>"
    },
    {
      "text": "The model for building secure software",
      "html": "<h2><span class=\"text-color-gold\">The model </span>for building secure software</h2>"
    },
    {
      "text": "Insights from 20+ years shaping the future of AppSec",
      "html": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> Insights from 20+ years shaping the future of AppSec </span> </h2>"
    },
    {
      "text": "FAQ",
      "html": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> FAQ </span> </h2>"
    }
  ],
  "expected": [
    {
      "id": "what",
      "label": "What is Application Security?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Application Security work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Application Security?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Application Security free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Application Security compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Application Security?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Application Security work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Application Security?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Application Security free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Application Security compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 8
}

Agent Ease of UseAPIEmerging recommendation

AI context endpoint

AI context endpoint is informational for this page.

Informational

Needs attention

AI context endpoint

Informational

Issue

AI context endpoint is informational for this page.

Why it matters

A context endpoint gives agents a small, low-latency summary of product purpose, safe actions, and canonical machine-readable resources without scraping the whole site.

Check name

AI context endpoint

Score

100/100

Status

informational

Category

API

Maturity

Emerging recommendation

Goal

Expose a compact API context endpoint agents can fetch before deciding which public API or discovery resource to use.

Result

AI context endpoint is informational for this page.

Validation steps

Fetch to find resource
AI context endpoint was not found at the expected path.

Evidence

{
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/ai/context",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/api/context",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/context",
            "statusCode": 404,
            "contentType": "text/html; charset=UTF-8",
            "length": 76169
          }
        ]
      },
      "issue": "AI context endpoint was not found at the expected path.",
      "howToFix": "Publish a concise JSON or Markdown AI context endpoint describing the product, public actions, and machine-readable resources."
    }
  ]
}

GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation

AIO: Query intent coverage

AIO: Query intent coverage is informational for this page.

Informational

Needs attention

AIO: Query intent coverage

Informational

Issue

Missing likely AI Overview intent sections: what, how, benefits, cost, compare.

Details

Why it matters

AI Overviews depend on Google-search eligibility, useful visible content, consistent structured data, answer-first sections, trust signals, and preview controls that permit snippets.

Check name

AIO: Query intent coverage

Score

70/100

Status

informational

Category

GEO, AIO & AEO

Maturity

Emerging recommendation

Goal

Make page content eligible and useful for Google AI Overviews and AI Mode extraction.

Result

AIO: Query intent coverage is informational for this page.

Evidence

{
  "headings": [
    {
      "text": "Backed by 20+ years of human-verified intelligence",
      "html": "<h2>Backed by&#xa0;<span class=\"text-color-orange\">20+ years</span> of human-verified intelligence</h2>"
    },
    {
      "text": "Address the new era of software development",
      "html": "<h2>Address the new era of <span class=\"text-color-synopsys-purple\">software development</span></h2>"
    },
    {
      "text": "Build secure code at AI speed",
      "html": "<h2 class=\"title image-text-cta-title\"> Build secure code at AI speed </h2>"
    },
    {
      "text": "Strengthen software supply chain security",
      "html": "<h2 class=\"title image-text-cta-title\"> Strengthen software supply chain security </h2>"
    },
    {
      "text": "Deliver code quality and compliance",
      "html": "<h2 class=\"title image-text-cta-title\"> Deliver code quality and compliance </h2>"
    },
    {
      "text": "The recognized leader in software security",
      "html": "<h2>The recognized <span class=\"text-color-synopsys-purple\">leader in software security</span></h2>"
    },
    {
      "text": "A Magic Quadrant™ Leader for the Eighth Consecutive Time",
      "html": "<h2 class=\"title image-text-cta-title\"> A Magic Quadrant&#x2122; Leader for the Eighth Consecutive Time </h2>"
    },
    {
      "text": "True Scale Application Security",
      "html": "<h2 class=\"title image-text-cta-title\"> True Scale Application Security </h2>"
    },
    {
      "text": "The model for building secure software",
      "html": "<h2><span class=\"text-color-gold\">The model </span>for building secure software</h2>"
    },
    {
      "text": "Insights from 20+ years shaping the future of AppSec",
      "html": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> Insights from 20+ years shaping the future of AppSec </span> </h2>"
    },
    {
      "text": "FAQ",
      "html": "<h2 class=\"title\"> <span class=\"text-size-normal\" style=\"color: ;\"> FAQ </span> </h2>"
    }
  ],
  "expected": [
    {
      "id": "what",
      "label": "What is Application Security?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Application Security work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Application Security?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Application Security free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Application Security compare with alternatives?",
      "pattern": {}
    }
  ],
  "missing": [
    {
      "id": "what",
      "label": "What is Application Security?",
      "pattern": {}
    },
    {
      "id": "how",
      "label": "How does Application Security work?",
      "pattern": {}
    },
    {
      "id": "benefits",
      "label": "Why use Application Security?",
      "pattern": {}
    },
    {
      "id": "cost",
      "label": "Is Application Security free or paid?",
      "pattern": {}
    },
    {
      "id": "compare",
      "label": "How does Application Security compare with alternatives?",
      "pattern": {}
    }
  ],
  "score": 70,
  "weight": 4
}

Agent Ease of UseAuthEmerging recommendation

Auth.md Agent Registration

Auth.md Agent Registration has an informational finding because the page appears to support authentication.

Informational

Needs attention

Auth.md Agent Registration

Informational

Issue

auth.md response did not match the expected agent registration shape. Content-Type "text/html; charset=iso-8859-1" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.

Why it matters

Agent registration metadata lets automated clients find the registration path, supported identity types, credential types, and related claim or revocation endpoints without scraping human docs.

Check name

Auth.md Agent Registration

Score

0/100

Status

informational

Category

Auth

Maturity

Emerging recommendation

Goal

Publish Auth.md and agent_auth metadata so agents can discover registration and credential requirements.

Result

Auth.md Agent Registration has an informational finding because the page appears to support authentication.

Validation steps

Fetch and validate /auth.md
auth.md response did not match the expected agent registration shape. Content-Type "text/html; charset=iso-8859-1" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.
Publish protected resource metadata
The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.
Validate agent_auth authorization metadata
OAuth authorization server metadata could not be fetched.

Evidence

{
  "failedStep": "auth-md",
  "steps": [
    {
      "id": "auth-md",
      "title": "Fetch and validate /auth.md",
      "status": "fail",
      "evidence": {
        "path": "/auth.md",
        "ok": false,
        "statusCode": 404,
        "contentType": "text/html; charset=iso-8859-1",
        "length": 236,
        "validation": {
          "valid": false,
          "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=iso-8859-1\" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.",
          "compatibleContentType": false,
          "contentLength": 228,
          "hasRegisterInstructions": false,
          "hasProtectedResourceLink": false,
          "hasAuthorizationServerLink": false,
          "mentionsIdentity": false,
          "mentionsCredential": false,
          "links": [
            "//W3C//DTD",
            "//EN",
            "http://www.w3.org/TR/html4/strict.dtd\">",
            "/title",
            "/head",
            "/h1",
            "/p",
            "/body",
            "/html"
          ],
          "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
        }
      },
      "issue": "auth.md response did not match the expected agent registration shape. Content-Type \"text/html; charset=iso-8859-1\" is not Markdown or text/plain; missing registration instructions; missing /.well-known/oauth-protected-resource link; missing /.well-known/oauth-authorization-server link; missing supported identity type language; missing credential type language.",
      "howToFix": "Serve /auth.md at the site root as Markdown with agent registration instructions and links to OAuth metadata."
    },
    {
      "id": "oauth-protected-resource",
      "title": "Publish protected resource metadata",
      "status": "fail",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "ok": false,
        "statusCode": 404,
        "contentType": "text/html; charset=iso-8859-1",
        "length": 236,
        "text": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
      },
      "issue": "The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/oauth-protected-resource with resource and authorization_servers fields."
    },
    {
      "id": "agent-auth-block",
      "title": "Validate agent_auth authorization metadata",
      "status": "fail",
      "evidence": {
        "valid": false,
        "issue": "OAuth authorization server metadata could not be fetched.",
        "fetch": {
          "ok": false,
          "statusCode": 404,
          "contentType": "text/html; charset=iso-8859-1",
          "length": 236,
          "text": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
        }
      },
      "issue": "OAuth authorization server metadata could not be fetched.",
      "howToFix": "Add agent_auth to /.well-known/oauth-authorization-server with register_uri, supported identity types, credential types, and claim or revocation URLs where applicable."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 3,
    "signals": [
      {
        "source": "visible-text",
        "weight": 3,
        "match": "password"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

AI DiscoverabilityDiscoverabilityEstablished

IndexNow key

IndexNow key is informational for this page.

Informational

Needs attention

IndexNow key

Informational

Issue

IndexNow key is informational for this page.

Why it matters

IndexNow lets sites notify participating search engines about changed URLs, but ownership verification requires a UTF-8 key file whose filename matches the key.

Check name

IndexNow key

Score

100/100

Status

informational

Category

Discoverability

Maturity

Established

Goal

Verify that IndexNow ownership key placement is detectable when the site advertises it.

Result

IndexNow key is informational for this page.

Validation steps

Find advertised IndexNow key location
No IndexNow key location was advertised in HTML, Link headers, or robots.txt.
Fetch and validate IndexNow key file
No discoverable IndexNow key file was found.

Evidence

{
  "steps": [
    {
      "id": "advertised-location",
      "title": "Find advertised IndexNow key location",
      "status": "informational",
      "evidence": {
        "advertised": []
      },
      "issue": "No IndexNow key location was advertised in HTML, Link headers, or robots.txt.",
      "howToFix": "Advertise the key location with robots.txt IndexNow-Key, rel=\"indexnow-key\", or meta name=\"indexnow-key-location\" if you want scanners to verify it."
    },
    {
      "id": "fetch-key",
      "title": "Fetch and validate IndexNow key file",
      "status": "informational",
      "evidence": {
        "advertised": [],
        "checked": []
      },
      "issue": "No discoverable IndexNow key file was found.",
      "howToFix": "Host a UTF-8 text file named {key}.txt using a 32-character hexadecimal key whose body exactly matches the key."
    }
  ]
}

Agent Ease of UseAuthEstablished

OAuth / OIDC discovery

OAuth / OIDC discovery has an informational finding because the page appears to support authentication.

Informational

Needs attention

OAuth / OIDC discovery

Informational

Issue

OAuth / OIDC discovery was not found at the expected path.

Why it matters

OAuth and OIDC discovery let agents find authorization, token, and key endpoints programmatically instead of relying on human documentation.

Check name

OAuth / OIDC discovery

Score

0/100

Status

informational

Category

Auth

Maturity

Established

Goal

Publish OAuth/OIDC discovery metadata so agents can authenticate with your APIs.

Result

OAuth / OIDC discovery has an informational finding because the page appears to support authentication.

Validation steps

Fetch to find resource
OAuth / OIDC discovery was not found at the expected path.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch to find resource",
      "status": "fail",
      "evidence": {
        "checked": [
          {
            "path": "/.well-known/openid-configuration",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          },
          {
            "path": "/.well-known/oauth-authorization-server",
            "statusCode": 404,
            "contentType": "text/html; charset=iso-8859-1",
            "length": 236
          }
        ]
      },
      "issue": "OAuth / OIDC discovery was not found at the expected path.",
      "howToFix": "Publish valid OAuth/OIDC metadata only when the site actually supports OAuth/OIDC. Otherwise omit provider discovery and document any unauthenticated public APIs separately."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 3,
    "signals": [
      {
        "source": "visible-text",
        "weight": 3,
        "match": "password"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

Agent Ease of UseAuthEmerging recommendation

OAuth Protected Resource

OAuth Protected Resource has an informational finding because the page appears to support authentication.

Informational

Needs attention

OAuth Protected Resource

Informational

Issue

The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.

Why it matters

Protected Resource metadata tells agents which authorization servers protect an API and how to connect authentication challenges to the right resource.

Check name

OAuth Protected Resource

Score

0/100

Status

informational

Category

Auth

Maturity

Emerging recommendation

Goal

Publish OAuth Protected Resource Metadata so agents can discover how to authenticate.

Result

OAuth Protected Resource has an informational finding because the page appears to support authentication.

Validation steps

Fetch protected resource metadata
The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.
Validate protected resource metadata
Response is not valid JSON.
Validate protected resource identity
Protected resource metadata `resource` did not match the resource identifier used to retrieve it.
Probe protected API Bearer challenge
No protected route with a 401 Bearer challenge was detected; metadata alone does not prove a protected resource.

Evidence

{
  "failedStep": "fetch",
  "steps": [
    {
      "id": "fetch",
      "title": "Fetch protected resource metadata",
      "status": "fail",
      "evidence": {
        "path": "/.well-known/oauth-protected-resource",
        "statusCode": 404,
        "contentType": "text/html; charset=iso-8859-1"
      },
      "issue": "The OAuth Protected Resource metadata endpoint did not return HTTP 2xx.",
      "howToFix": "Publish /.well-known/oauth-protected-resource JSON."
    },
    {
      "id": "metadata",
      "title": "Validate protected resource metadata",
      "status": "fail",
      "evidence": {
        "valid": false,
        "compatibleContentType": false,
        "issue": "Response is not valid JSON.",
        "rawExcerpt": "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<title>404 Not Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p>The requested URL was not found on this server.</p>\n</body></html>\n"
      },
      "issue": "Response is not valid JSON.",
      "howToFix": "Publish resource and authorization_servers as absolute URLs."
    },
    {
      "id": "resource-identity",
      "title": "Validate protected resource identity",
      "status": "fail",
      "evidence": {
        "expectedResource": "https://www.blackduck.com"
      },
      "issue": "Protected resource metadata `resource` did not match the resource identifier used to retrieve it.",
      "howToFix": "Set `resource` to the origin/resource identifier represented by /.well-known/oauth-protected-resource."
    },
    {
      "id": "protected-route-challenge",
      "title": "Probe protected API Bearer challenge",
      "status": "informational",
      "evidence": {
        "checked": [
          {
            "path": "/api/admin/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.blackduck.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          },
          {
            "path": "/api/admin/summary",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.blackduck.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          },
          {
            "path": "/api/scans",
            "statusCode": 404,
            "wwwAuthenticate": {
              "valid": false,
              "present": false
            },
            "expectedMetadataUrl": "https://www.blackduck.com/.well-known/oauth-protected-resource",
            "metadataUrlMatches": true,
            "resourceMatchesRequestContext": true
          }
        ]
      },
      "issue": "No protected route with a 401 Bearer challenge was detected; metadata alone does not prove a protected resource.",
      "howToFix": "When this site exposes bearer-protected APIs, return 401 with WWW-Authenticate: Bearer and link resource_metadata."
    }
  ],
  "authApplicability": {
    "supportsAuth": true,
    "score": 3,
    "signals": [
      {
        "source": "visible-text",
        "weight": 3,
        "match": "password"
      }
    ]
  },
  "resourceFetchSucceeded": false
}

SEOSEOBrowser audit

Links are not crawlable

50 Fail

Check name

Links are not crawlable

Score

0/100

Status

fail

Device

desktop

Category

SEO

Fix guidance

Search engines may use `href` attributes on links to crawl websites. Ensure that the `href` attribute of anchor elements links to an appropriate destination, so more pages of the site can be discovered. [Learn how to make links crawlable](https://support.google.com/webmasters/answer/9112205)

References

https://developer.chrome.com/docs/lighthouse/seo/

Evidence

{
  "description": "Search engines may use `href` attributes on links to crawl websites. Ensure that the `href` attribute of anchor elements links to an appropriate destination, so more pages of the site can be discovered. [Learn how to make links crawlable](https://support.google.com/webmasters/answer/9112205)"
}

SEOSEOBrowser audit

Links do not have descriptive text

50 Fail

Check name

Links do not have descriptive text

Score

0/100

Status

fail

Device

desktop

Category

SEO

Estimated savings

17 links found

Fix guidance

Descriptive link text helps search engines understand your content. [Learn how to make links more accessible](https://developer.chrome.com/docs/lighthouse/seo/link-text/).

References

https://developer.chrome.com/docs/lighthouse/seo/

Evidence

{
  "displayValue": "17 links found",
  "description": "Descriptive link text helps search engines understand your content. [Learn how to make links more accessible](https://developer.chrome.com/docs/lighthouse/seo/link-text/)."
}

Performance and AccessibilityAccessibilityBrowser audit

`[aria-*]` attributes do not match their roles

33 Fail

Check name

`[aria-*]` attributes do not match their roles

Score

0/100

Status

fail

Device

desktop

Category

Accessibility

Fix guidance

Each ARIA `role` supports a specific subset of `aria-*` attributes. Mismatching these invalidates the `aria-*` attributes. [Learn how to match ARIA attributes to their roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-attr).

References

https://web.dev/learn/accessibility/

Evidence

{
  "description": "Each ARIA `role` supports a specific subset of `aria-*` attributes. Mismatching these invalidates the `aria-*` attributes. [Learn how to match ARIA attributes to their roles](https://dequeuniversity.com/rules/axe/4.11/aria-allowed-attr)."
}

Performance and AccessibilityAccessibilityBrowser audit

Buttons do not have an accessible name

33 Fail

Check name

Buttons do not have an accessible name

Score

0/100

Status

fail

Device

desktop

Category

Accessibility

Fix guidance

When a button doesn't have an accessible name, screen readers announce it as "button", making it unusable for users who rely on screen readers. [Learn how to make buttons more accessible](https://dequeuniversity.com/rules/axe/4.11/button-name).

References

https://web.dev/learn/accessibility/

Evidence

{
  "description": "When a button doesn't have an accessible name, screen readers announce it as \"button\", making it unusable for users who rely on screen readers. [Learn how to make buttons more accessible](https://dequeuniversity.com/rules/axe/4.11/button-name)."
}

Performance and AccessibilityAccessibilityBrowser audit

Heading elements are not in a sequentially-descending order

33 Fail

Check name

Heading elements are not in a sequentially-descending order

Score

0/100

Status

fail

Device

desktop

Category

Accessibility

Fix guidance

Properly ordered headings that do not skip levels convey the semantic structure of the page, making it easier to navigate and understand when using assistive technologies. [Learn more about heading order](https://dequeuniversity.com/rules/axe/4.11/heading-order).

References

https://web.dev/learn/accessibility/

Evidence

{
  "description": "Properly ordered headings that do not skip levels convey the semantic structure of the page, making it easier to navigate and understand when using assistive technologies. [Learn more about heading order](https://dequeuniversity.com/rules/axe/4.11/heading-order)."
}

Performance and AccessibilityPerformanceBrowser audit

Font display

17 Fail

Check name

Font display

Score

0/100

Status

fail

Device

desktop

Category

Performance

Estimated savings

Est savings of 110 ms

Fix guidance

Consider setting [font-display](https://developer.chrome.com/docs/performance/insights/font-display) to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with [font metric overrides](https://developer.chrome.com/blog/font-fallbacks).

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Est savings of 110 ms",
  "description": "Consider setting [font-display](https://developer.chrome.com/docs/performance/insights/font-display) to swap or optional to ensure text is consistently visible. swap can be further optimized to mitigate layout shifts with [font metric overrides](https://developer.chrome.com/blog/font-fallbacks)."
}

Performance and AccessibilityPerformanceBrowser audit

Improve image delivery

17 Fail

Check name

Improve image delivery

Score

0/100

Status

fail

Device

desktop

Category

Performance

Estimated savings

Est savings of 950 KiB

Fix guidance

Reducing the download time of images can improve the perceived load time of the page and LCP. [Learn more about optimizing image size](https://developer.chrome.com/docs/performance/insights/image-delivery)

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Est savings of 950 KiB",
  "description": "Reducing the download time of images can improve the perceived load time of the page and LCP. [Learn more about optimizing image size](https://developer.chrome.com/docs/performance/insights/image-delivery)"
}

Performance and AccessibilityPerformanceBrowser audit

Legacy JavaScript

17 Fail

Check name

Legacy JavaScript

Score

0/100

Status

fail

Device

desktop

Category

Performance

Estimated savings

Est savings of 46 KiB

Fix guidance

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)

References

https://web.dev/learn/performance/

Evidence

{
  "displayValue": "Est savings of 46 KiB",
  "description": "Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)"
}

Performance and AccessibilityPerformanceBrowser audit

Links do not have a discernible name

17 Fail

Check name

Links do not have a discernible name

Score

0/100

Status

fail

Device

desktop

Category

Performance

Fix guidance

Link text (and alternate text for images, when used as links) that is discernible, unique, and focusable improves the navigation experience for screen reader users. [Learn how to make links accessible](https://dequeuniversity.com/rules/axe/4.11/link-name).

References

https://web.dev/learn/performance/

Evidence

{
  "description": "Link text (and alternate text for images, when used as links) that is discernible, unique, and focusable improves the navigation experience for screen reader users. [Learn how to make links accessible](https://dequeuniversity.com/rules/axe/4.11/link-name)."
}

Performance and AccessibilityPerformanceBrowser audit

Lists do not contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

17 Fail

Check name

Lists do not contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).

Score

0/100

Status

fail

Device

desktop

Category

Performance

Fix guidance

Screen readers have a specific way of announcing lists. Ensuring proper list structure aids screen reader output. [Learn more about proper list structure](https://dequeuniversity.com/rules/axe/4.11/list).

References

https://web.dev/learn/performance/

Evidence

{
  "description": "Screen readers have a specific way of announcing lists. Ensuring proper list structure aids screen reader output. [Learn more about proper list structure](https://dequeuniversity.com/rules/axe/4.11/list)."
}

Performance and AccessibilityPerformanceBrowser audit

Render-blocking requests

17 Fail

Check name

Render-blocking requests

Score

0/100

Status

fail

Device

desktop

Category

Performance

Fix guidance

Requests are blocking the page's initial render, which may delay LCP. [Deferring or inlining](https://developer.chrome.com/docs/performance/insights/render-blocking) can move these network requests out of the critical path.

References

https://web.dev/learn/performance/

Evidence

{
  "description": "Requests are blocking the page's initial render, which may delay LCP. [Deferring or inlining](https://developer.chrome.com/docs/performance/insights/render-blocking) can move these network requests out of the critical path."
}

Fix with MCP or CLI

Use this report as the handoff into remediation. Generate a coding-agent prompt with the failing checks attached, or jump to the MCP and CLI setup docs before your next rescan.

Score history

Public scan score over time

Public reports for this website origin. Select any point or report link to open that canonical report.

1 reports

Public score history report links
Scan date	Score	Readiness	Report
Jun 8, 2026	37/100	Level 2, Agent-Limited	Current report