Black Duck Enhances Coverity with AI-Powered Security Features and EU CRA Compliance Tools — Black Duck Software, Inc.

Event summary

Black Duck introduced AI-powered enhancements to its Coverity static analysis solution on July 14, 2026.
New features include AI-assisted issue triage, a Model Context Protocol server for AI coding agents, and new IDOR vulnerability detection in JavaScript and TypeScript.
Coverity now supports Rust 1.92 programming language and offers purpose-built capabilities to align with the EU Cyber Resilience Act (CRA) requirements.
The updates are generally available for customer deployment, maintaining Coverity's deterministic, auditable scan results.

The big picture

Black Duck's updates to Coverity reflect a strategic shift towards AI-assisted development and regulatory compliance, particularly with the EU Cyber Resilience Act. As software development increasingly relies on AI agents, Black Duck aims to provide tools that enhance security while maintaining control over data governance. The integration of AI into static analysis could redefine industry standards for code quality and vulnerability management.

What we're watching

Regulatory Compliance: The pace at which Black Duck can help clients meet EU CRA requirements will determine its competitive edge in regulated industries.
AI Adoption: How effectively Black Duck integrates AI into Coverity without compromising auditability and trust will shape its market positioning.
Market Differentiation: Whether the new AI-powered features can set Coverity apart from competitors in the static analysis space.