Black Duck Signal Integrates Vulnerability Scanning into Claude

The integration leverages the Model Context Protocol to connect the Signal security engine directly to the Claude interface. When a developer initiates a scan, the system transmits source content to Black Duck’s remote analysis endpoint. Once processed, the findings are returned as structured data, allowing Claude to interpret risks and guide remediation efforts through natural language.

This workflow enables teams to scan individual files, git changes, or entire projects as they build. According to Dipto Chakravarty, Chief Product and Technology Officer at Black Duck, the goal is to maintain security standards without hindering the velocity that AI-driven development currently provides. The tool is available starting September 2, 2026, for users seeking to embed automated security checks directly into their existing reasoning and refactoring processes.