Arthur McMiler 
- DOW programs can acquire Black Duck tools from the P1 registry with limited accreditation work
- Black Duck Public Sector and Defense VP John Savio said P1 buyers can complete procurements in under 30 days
- The company joins Alpha Omega, Exiger and Dark Wolf Solutions among recent awardable P1 vendors
Black Duck, an application security software company, has been deemed “Awardable” on the Platform One, or P1, Solutions Marketplace.
In a blog post Tuesday, Black Duck’s Public Sector and Defense Vice President John Savio wrote that the designation showed that the company’s offerings passed the marketplace’s evaluation process, and the tools can be acquired quickly by Department of War buyers.
What Does Awardable Status Mean for DOW Buyers?
With the listing in place, defense programs may draw Black Duck tools straight from the P1 registry, with only limited accreditation required before use, according to the company.
Savio said Black Duck buyers can tap flexible contracting options to finish a procurement in under 30 days, a timeline it contrasted with lengthier conventional acquisition cycles. Awardable P1 offerings can be bought through Federal Acquisition Regulation-based contracts and other transaction agreements.
Savio noted that P1 was set up to carry out thorough application security reviews so software can be fielded faster and with fewer risks. He said his company already provides those capabilities to local-level customers and is now extending them to DOW organizations through a simpler route.
How Does the P1 Solutions Marketplace Work?
Black Duck described the marketplace as an Air Force-run digital catalog of screened DevSecOps tools available to the wider Air Force and Space Force communities. The catalog spans hardware, software and services and houses pitch videos that have already gone through competition, making listed offerings readily awardable.
Vendors seeking to be listed record five-minute videos outlining their products and services and explaining how those offerings meet government requirements. Each submission is evaluated against detailed scoring rubrics and competitive procedures before it can earn Awardable status, giving buyers assurance that catalog entries have been vetted in advance.
What Benefits Does P1 Offer Government Software Teams?
According to Black Duck, P1 supplies both open-source tools and enterprise products that help teams develop, deploy and protect software at scale. The company said the marketplace can cut approval timelines by as much as 84%, help users meet federal acquisition and security rules and reinforce DevSecOps workflows with vetted open-source security tooling.
Beyond DevSecOps engineering and platform security, P1 focus areas include cybersecurity, pipeline and platform integration, identity and supply chain risk management, and edge computing.
The listing comes as DOW leadership reviews how the department structures software delivery. Emil Michael, under secretary of war for research and engineering, recently directed a board study examining software delivery and commercial artificial intelligence adoption.
How Else Can Government Customers Access Black Duck?
The P1 listing follows a January 2025 agreement under which Carahsoft Technology became the Master Government Aggregator for Black Duck’s application security testing, or AST, products. Carahsoft offers the tools to public sector buyers through contract vehicles including NASA Solutions for Enterprise-Wide Procurement V, Information Technology Enterprise Solutions – Software 2, The Interlocal Purchasing System and The Quilt. It also markets them to its reseller partners.
Black Duck’s AST suite flags security, quality and compliance problems across various types of software. It connects with third-party and open-source tools through an open ecosystem design. Clearlake Capital Group and Francisco Partners launched Black Duck as a standalone company after acquiring Synopsys Software Integrity Group in October 2024.
Which Other Companies Have Earned P1 Awardable Status?
Black Duck joins a growing roster of vendors with awardable P1 offerings. In August, Alpha Omega said its Continuum Code technology, which uses AI-assisted transformation to convert, refactor and test legacy code, received the designation.
Exiger’s software supply chain protection product, Exiger Cyber, earned the status in April, while a joint CALIBRE Systems-RegScale offering and Acuity’s Helios have also been listed. In October 2025, Dark Wolf Solutions said its Saving Throw DevSecOps tool, built to detect zero-day vulnerabilities before adversaries exploit them, became awardable.
