Application security solutions provider Black Duck Software Inc. today announced the launch of Black Duck Signal, a new agentic artificial intelligence solution designed to secure software “at the speed of AI-powered development.”

The new Signal solution combines 20 years of Black Duck’s software security expertise and intellectual property with large language model-powered software analysis to detect and remediate vulnerabilities autonomously in business-critical applications.

The solution seeks to provide companies that are rapidly adopting AI coding assistants and agentic workflows with application security solutions that can keep pace. Black Duck Signal is purpose-built to work with AI-native development by leveraging a collection of AI agents and Model Context Protocol services to find, prioritize and fix vulnerabilities automatically across source code, binaries, supply chain components and running applications.

“Developers are moving faster than ever, embracing AI to build and deliver software at unprecedented speed,” said Chief Executive Jason Schmitt. “Signal is designed to give developers the clarity, confidence and control they need to innovate securely without slowing down.”

Differing from generic AI tools, Signal combines advanced, multimodel LLM technology with human-labeled application security intelligence from the Black Duck KnowledgeBase to deliver accurate, context-aware insights in real time. The agentic architecture allows developers and security teams to work more efficiently by integrating directly into popular AI coding assistants, integrated development environments and other Black Duck application security products.

Key features and benefits of Signal include real-time, incremental analysis across new, modified and existing code to deliver accurate security findings as changes are made or across full applications. The service integrates directly with leading AI coding assistants such as Google Gemini, GitHub Copilot, Claude Code and Cursor to embed security directly into AI-driven development workflows.

The platform also uses role-based and task-specific AI agents to extend the capabilities of development and security teams by automating complex workflows and specialized risk detection across modern and legacy programming languages.

Other features include automated remediation with verified code fixes and library patching, built-in supply chain and license compliance analysis, and the ability to detect business logic flaws that go beyond traditional rule and signature-based approaches.

Black Duck Signal is available now to existing customers and design partners, with broader availability in early 2026.

Image: Black Duck