Defensics

Defensics is an automated black-box fuzz testing and security testing tool from Black Duck, designed to identify software defects, protocol implementation errors and unknown or zero-day vulnerabilities. Its primary purpose is to test how applications, network services, connected devices and communication protocols behave when exposed to malformed, unexpected or invalid inputs. Key features include intelligent generational fuzzing, more than 300 prebuilt test suites, customizable protocol and file-format templates, automated test execution, API-based integration and detailed vulnerability reports. Reports include contextual logs, protocol paths, message sequences, mappings to Common Weakness Enumeration (CWE) categories and reproducible test cases to help developers investigate and fix defects. The platform supports integration into traditional software development life cycles and continuous integration (CI) workflows, allowing security testing to begin early in development. Its automation capabilities support scalable testing, while remediation packages help organisations coordinate vulnerability fixes with suppliers. Defensics is particularly useful because it operates as a black-box tester and does not require access to an application's source code.