Get webhook notifications whenever All Blackduck Status Page creates an incident, updates an incident, resolves an incident or changes a component status.
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 19, 2026 - 13:00 UTC
Scheduled
Planned Maintenance Window: Monday, October 19, 2026, at 9:00 AM EDT ( 2:00 PM UTC) Expected Duration: 1 hour
As part of our ongoing commitment to platform security, Black Duck will be updating the SSL/TLS cipher configurations used by app.blackduck.com and blackducksoftware.com . This update aligns our hosted services with current industry security standards and removes support for legacy cipher suites that are no longer considered sufficiently secure.
SERVICE AFFECTED: - app.blackduck.com: Used by Black Duck SCA hosted customers and associated integrations that connect to hosted Black Duck servers - blackducksoftware.com: Black Duck public web properties and associated services.
EXPECTED IMPACT: - No downtime is expected during this maintenance window.
Most customers will not experience any impact as a result of this change.
However, applications, browsers, and systems that rely on older operating systems, runtimes, or TLS implementations and do not support modern TLS cipher suites may be unable to establish secure connections after the update. Examples include:
- Java 7-based applications or integrations - Android 5.0 and earlier devices - Windows 7 systems that have not been updated with newer TLS support - Internet Explorer 11 running on Windows 7 or Windows 8.1 (Internet Explorer 11 on Windows 10 is not expected to be affected) - Safari 6 - Safari 7 - Safari 8
Customers using current versions of Java, browsers, Android, Windows, Linux, or macOS are not expected to be affected.
RECOMMENDED ACTION: If your organization has applications, integrations, automation, or CI/CD pipelines that connect to app.blackduck.com hosted Black Duck SCA environments, we recommend verifying that they are running on supported platforms and modern TLS implementations prior to October 19, 2026.
Particular attention should be given to older Java-based integrations, custom API clients, legacy browser-based workflows, and automation tools that may still rely on outdated TLS cipher support.
ADDITIONAL INFORMATION: This update affects only the SSL/TLS configuration of Black Duck hosted services. No changes are required for Black Duck on-premises deployments, which already support modern cipher configurations.
If you have questions regarding compatibility with your environment, please contact Black Duck Support.