Black Duck Continuous Dynamic

Continuous Dynamic is Black Duck's production-safe Dynamic Application Security Testing platform. The product combines automated scanning, AI verification of vulnerabilities, and manual assessment by Threat Research Center engineers. The service-led model handles the production-safety and authentication-configuration problems that often block self-serve DAST adoption.

Three service editions cover different program shapes. Baseline Edition runs unconfigured scans on web applications without complex forms or authentication, with vulnerability verification and TRC support included. Standard Edition adds configured scans for permanent web applications using forms or authenticated sessions. Premium Edition adds business-logic testing by TRC engineers for high-priority and mission-critical applications. Unlimited retesting is included on every edition.

Continuous Dynamic configures custom site authentication including multi-step logins, multi-factor authentication, and Privileged Access Management integration. Production-safe form testing is pre-trained inside the scanner so business workflows do not get triggered during scans. The TRC engagement model is the practical reason customers stick with Continuous Dynamic. Customers in active assessment talk to engineers rather than working a ticket queue.

TRC engineer engagement is the practical reason customers stick with Continuous Dynamic. The product is configured and operated by Black Duck engineers rather than the customer. Programs that scope Continuous Dynamic expecting a self-serve DAST scanner with limited setup misread the product. Merito's positioning is that Continuous Dynamic is managed DAST with engineers in the loop, not a tool to install and run.

AI verification matters but is not the differentiator. The TRC manual assessment is what catches business-logic vulnerabilities that AI verification cannot reason about. Premium Edition is the right scope for mission-critical applications because the TRC business-logic testing is the only path to that coverage.

Continuous Dynamic pairs with Polaris when the customer wants unified findings across SAST, SCA, and DAST. The fAST Dynamic engine inside Polaris and the service-led Continuous Dynamic delivery overlap. Programs typically run both for different application surfaces (Polaris fAST Dynamic for self-serve, Continuous Dynamic for managed assessment). Merito makes the call during MAPS Assessment.