# JFrog vs Mend.io Comparison --- ## AI Generated Summary - **G2 reviewers report** that Mend.io excels in application security, with users highlighting its ease of integration into source code repositories. This feature allows teams to scan multiple repositories without extensive configuration, making onboarding straightforward and efficient. - **Users say** JFrog simplifies artifact management significantly, with one reviewer noting how it organizes dependencies, builds, and releases in a single platform. This is particularly beneficial for teams working across various environments, enhancing overall reliability. - **Reviewers mention** that while both products have similar ease of use ratings, Mend.io slightly edges out with a more intuitive interface. Users appreciate its responsive support, which contributes to a smoother user experience during implementation. - **According to verified reviews** , JFrog's seamless integration with CI/CD tools is a standout feature, making it a preferred choice for DevOps teams. Users find the initial setup easy, which helps in quickly adapting to their workflows. - **G2 reviewers highlight** that Mend.io's strong focus on security features, such as its ability to enhance application security, is a major plus. Users feel confident in its capabilities, especially with the responsive support team backing them up. - **Users report** that JFrog's security features, particularly with Xray, provide excellent artifact versioning capabilities. This is crucial for teams managing multiple environments, as it ensures that security is maintained throughout the development lifecycle. | | JFrog | Mend.io | |---|---|---| | **Star Rating** | 4.2 out of 5 | 4.3 out of 5 | | **Total Reviews** | 135 | 112 | | **Largest Market Segment** | Enterprise (46.9% of reviews) | Small-Business (39.0% of reviews) | | **Entry Level Price** | Starting at $150.00 Per Month | $300.00 1 Contributing Developer (CDs) Per Year | --- ## Top Pros & Cons ### JFrog Pros: - Features (18 reviews) - Repository Management (14 reviews) Cons: - Complexity (9 reviews) - Expensive (8 reviews) ### Mend.io Pros: - Scanning Efficiency (8 reviews) - Ease of Use (7 reviews) Cons: - Integration Issues (6 reviews) - Limited Features (3 reviews) --- ## Ratings Comparison | Rating | JFrog | Mend.io | |---|---|---| | **Meets Requirements** | 8.6 (93 reviews) | 8.6 (81 reviews) | | **Ease of Use** | 8.2 (95 reviews) | 8.3 (82 reviews) | | **Ease of Setup** | 8.3 (61 reviews) | 8.1 (50 reviews) | | **Ease of Admin** | 8.4 (40 reviews) | 8.2 (50 reviews) | | **Quality of Support** | 8.3 (81 reviews) | 8.7 (67 reviews) | | **Has the product been a good partner in doing business?** | 8.5 (39 reviews) | 8.8 (46 reviews) | | **Product Direction (% positive)** | 8.5 (87 reviews) | 8.6 (75 reviews) | --- ## Pricing ### JFrog #### Entry-Level Pricing Plan: PRO Price: Starting at $150.00 Per Month Description: Automated Artifact and Container Registry for Individuals & Small teams Key Features: - Universal Binary Repository - Release Lifecycle Management - Unlimited Docker Hub Pulls [Browse all 3 editions](https://www.g2.com/products/jfrog-2024-03-28/pricing) #### Free Trial Yes ### Mend.io #### Entry-Level Pricing Plan: Mend AI Premium Price: $300.00 1 Contributing Developer (CDs) Per Year Description: Secure AI powered applications.
 AI red teaming, prompt hardening & more Key Features: - AI component inventory - AI component risk insights - System Prompt Hardening [Browse all 3 editions](https://www.g2.com/products/mend-io/pricing) #### Free Trial Yes --- ## Features Comparison By Category ### Application Release Orchestration | Product | Score | Reviews | |---|---|---| | **JFrog** | 7.7/10 | 9 | | **Mend.io** | N/A | N/A | #### Administration | Feature | JFrog | Mend.io | |---|---|---| | **Configuration Management** | 7.1 (8 reviews) | Not enough data | | **Access Control** | 6.9 (8 reviews) | Not enough data | | **Dashboards** | 7.7 (8 reviews) | Not enough data | #### Functionality | Feature | JFrog | Mend.io | |---|---|---| | **Deployment Automation** | 7.5 (8 reviews) | Not enough data | | **Process Analytics** | 7.5 (8 reviews) | Not enough data | | **Plugins** | 8.1 (9 reviews) | Not enough data | | **APIs / Integrations** | 8.5 (9 reviews) | Not enough data | | **Feature Flags** | Feature Not Available | Not enough data | #### Processes | Feature | JFrog | Mend.io | |---|---|---| | **Pipelines** | 8.5 (9 reviews) | Not enough data | | **Orchestration** | 7.4 (9 reviews) | Not enough data | | **Workflow Visualization** | 7.3 (8 reviews) | Not enough data | ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | 7.3/10 | 15 | #### Administration | Feature | JFrog | Mend.io | |---|---|---| | **API / Integrations** | Not enough data | 7.6 (7 reviews) | | **Extensibility** | Not enough data | 7.7 (8 reviews) | #### Analysis | Feature | JFrog | Mend.io | |---|---|---| | **Reporting and Analytics** | Not enough data | 7.3 (11 reviews) | | **Issue Tracking** | Not enough data | 7.6 (11 reviews) | | **Static Code Analysis** | Not enough data | 8.2 (11 reviews) | | **Code Analysis** | Not enough data | 7.6 (11 reviews) | #### Testing | Feature | JFrog | Mend.io | |---|---|---| | **Command-Line Tools** | Not enough data | 7.2 (10 reviews) | | **Manual Testing** | Not enough data | Feature Not Available | | **Test Automation** | Not enough data | 7.2 (9 reviews) | | **Compliance Testing** | Not enough data | 7.7 (10 reviews) | | **Black-Box Scanning** | Not enough data | Not enough data | | **Detection Rate** | Not enough data | 7.4 (9 reviews) | | **False Positives** | Not enough data | 5.0 (9 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | JFrog | Mend.io | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | ### Container Security | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | 8.3/10 | 14 | #### Administration | Feature | JFrog | Mend.io | |---|---|---| | **Risk Scoring** | Not enough data | 8.3 (7 reviews) | | **Secrets Management** | Not enough data | Feature Not Available | | **Security Auditing** | Not enough data | 9.1 (9 reviews) | | **Configuration Management** | Not enough data | 8.0 (10 reviews) | #### Monitoring | Feature | JFrog | Mend.io | |---|---|---| | **Continuous Image Assurance** | Not enough data | Feature Not Available | | **Behavior Monitoring** | Not enough data | Feature Not Available | | **Observability** | Not enough data | Feature Not Available | #### Protection | Feature | JFrog | Mend.io | |---|---|---| | **Dynamic Image Scanning** | Not enough data | 7.9 (8 reviews) | | **Runtime Protection** | Not enough data | Feature Not Available | | **Workload Protection** | Not enough data | Feature Not Available | | **Network Segmentation** | Not enough data | Feature Not Available | ### Cloud Infrastructure Automation | Product | Score | Reviews | |---|---|---| | **JFrog** | 8.7/10 | 5 | | **Mend.io** | N/A | N/A | #### Administration | Feature | JFrog | Mend.io | |---|---|---| | **Administration Console** | 8.7 (5 reviews) | Not enough data | | **Task Management** | 8.7 (5 reviews) | Not enough data | | **Dashboards and Visualizations** | 9.0 (5 reviews) | Not enough data | | **Access Control** | 9.3 (5 reviews) | Not enough data | #### Automation | Feature | JFrog | Mend.io | |---|---|---| | **Test Automation** | Not enough data | Not enough data | | **Intelligent Automation** | Feature Not Available | Not enough data | | **Release Automation** | 8.7 (5 reviews) | Not enough data | | **Automated Provisioning** | Feature Not Available | Not enough data | #### IT Management | Feature | JFrog | Mend.io | |---|---|---| | **Workflow Management** | Not enough data | Not enough data | | **Infrastructure Management** | 7.7 (5 reviews) | Not enough data | | **IT Discovery** | Not enough data | Not enough data | ### MLOps Platforms | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Deployment | Feature | JFrog | Mend.io | |---|---|---| | **Language Flexibility** | Not enough data | Not enough data | | **Framework Flexibility** | Not enough data | Not enough data | | **Versioning** | Not enough data | Not enough data | | **Ease of Deployment** | Not enough data | Not enough data | | **Scalability** | Not enough data | Not enough data | #### Deployment | Feature | JFrog | Mend.io | |---|---|---| | **Language Flexibility** | Not enough data | Not enough data | | **Framework Flexibility** | Not enough data | Not enough data | | **Versioning** | Not enough data | Not enough data | | **Ease of Deployment** | Not enough data | Not enough data | | **Scalability** | Not enough data | Not enough data | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Cataloging** | Not enough data | Not enough data | | **Monitoring** | Not enough data | Not enough data | | **Governing** | Not enough data | Not enough data | | **Model Registry** | Not enough data | Not enough data | #### Operations | Feature | JFrog | Mend.io | |---|---|---| | **Metrics** | Not enough data | Not enough data | | **Infrastructure management** | Not enough data | Not enough data | | **Collaboration** | Not enough data | Not enough data | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Cataloging** | Not enough data | Not enough data | | **Monitoring** | Not enough data | Not enough data | | **Governing** | Not enough data | Not enough data | #### Generative AI | Feature | JFrog | Mend.io | |---|---|---| | **AI Text Generation** | Not enough data | Not enough data | | **AI Text Summarization** | Not enough data | Not enough data | ### Vulnerability Scanner | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Performance | Feature | JFrog | Mend.io | |---|---|---| | **Issue Tracking** | Not enough data | Not enough data | | **Detection Rate** | Not enough data | Not enough data | | **False Positives** | Not enough data | Not enough data | | **Automated Scans** | Not enough data | Not enough data | #### Network | Feature | JFrog | Mend.io | |---|---|---| | **Compliance Testing** | Not enough data | Not enough data | | **Perimeter Scanning** | Not enough data | Feature Not Available | | **Configuration Monitoring** | Not enough data | Not enough data | #### Application | Feature | JFrog | Mend.io | |---|---|---| | **Manual Application Testing** | Not enough data | Feature Not Available | | **Static Code Analysis** | Not enough data | Not enough data | | **Black Box Testing** | Not enough data | Not enough data | #### Agentic AI - Vulnerability Scanner | Feature | JFrog | Mend.io | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | ### Continuous Delivery | Product | Score | Reviews | |---|---|---| | **JFrog** | 8.3/10 | 14 | | **Mend.io** | N/A | N/A | #### Functionality | Feature | JFrog | Mend.io | |---|---|---| | **Deployment-Ready Staging** | 8.5 (12 reviews) | Not enough data | | **Integration** | 8.3 (11 reviews) | Not enough data | | **Extensible** | 8.6 (11 reviews) | Not enough data | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Processes and Workflow** | 8.7 (13 reviews) | Not enough data | | **Reporting** | 7.4 (9 reviews) | Not enough data | | **Automation** | 8.2 (12 reviews) | Not enough data | #### Agentic AI - Continuous Delivery | Feature | JFrog | Mend.io | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | ### Repository Management | Product | Score | Reviews | |---|---|---| | **JFrog** | 6.7/10 | 13 | | **Mend.io** | N/A | N/A | #### Functionality | Feature | JFrog | Mend.io | |---|---|---| | **Package Management** | 7.2 (10 reviews) | Not enough data | | **Integration** | 6.7 (9 reviews) | Not enough data | | **Code Analysis** | 5.9 (9 reviews) | Not enough data | | **Vulnerability Checks** | 6.7 (8 reviews) | Not enough data | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Package Access Control** | 8.3 (11 reviews) | Not enough data | | **Package Tracking** | 7.1 (8 reviews) | Not enough data | | **Automation** | 4.7 (6 reviews) | Not enough data | | **Rollback** | 6.7 (9 reviews) | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **JFrog** | 9.3/10 | 5 | | **Mend.io** | 8.5/10 | 53 | #### Functionality - Software Composition Analysis | Feature | JFrog | Mend.io | |---|---|---| | **Language Support** | Not enough data | 8.5 (45 reviews) | | **Integration** | Not enough data | 8.5 (47 reviews) | | **Transparency** | Not enough data | 8.6 (44 reviews) | #### Effectiveness - Software Composition Analysis | Feature | JFrog | Mend.io | |---|---|---| | **Remediation Suggestions** | Not enough data | 8.2 (45 reviews) | | **Continuous Monitoring** | 9.3 (5 reviews) | 8.8 (44 reviews) | | **Thorough Detection** | Not enough data | 8.6 (45 reviews) | ### IoT Device Management Platforms | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Device Recognition | Feature | JFrog | Mend.io | |---|---|---| | **Device Discovery** | Not enough data | Not enough data | | **Device Types** | Not enough data | Not enough data | | **Dashboard** | Not enough data | Not enough data | #### Monitoring | Feature | JFrog | Mend.io | |---|---|---| | **Device Status** | Not enough data | Not enough data | | **Alerts & Notifications** | Not enough data | Not enough data | | **Analytics** | Not enough data | Not enough data | #### Provisioning | Feature | JFrog | Mend.io | |---|---|---| | **Remote Configuration** | Not enough data | Not enough data | | **Event Triggering** | Not enough data | Not enough data | | **Device Diagnostics & Repair** | Not enough data | Not enough data | | **Firmware Updates** | Not enough data | Not enough data | ### DevOps Platforms | Product | Score | Reviews | |---|---|---| | **JFrog** | 7.7/10 | 26 | | **Mend.io** | N/A | N/A | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Configuration Management** | 8.0 (18 reviews) | Not enough data | | **Access Control** | 7.1 (13 reviews) | Not enough data | | **Orchestration** | 7.9 (13 reviews) | Not enough data | #### Functionality | Feature | JFrog | Mend.io | |---|---|---| | **Automation** | 7.9 (18 reviews) | Not enough data | | **Integrations** | 7.7 (16 reviews) | Not enough data | | **Extensibility** | 6.2 (10 reviews) | Not enough data | #### Processes | Feature | JFrog | Mend.io | |---|---|---| | **Pipeline Control** | 8.6 (14 reviews) | Not enough data | | **Workflow Visualization** | 7.0 (10 reviews) | Not enough data | | **Continuous Deployment** | 8.9 (18 reviews) | Not enough data | ### Continuous Integration | Product | Score | Reviews | |---|---|---| | **JFrog** | 7.7/10 | 11 | | **Mend.io** | N/A | N/A | #### Functionality | Feature | JFrog | Mend.io | |---|---|---| | **Integrations** | 8.0 (10 reviews) | Not enough data | | **Extensibility** | 8.0 (10 reviews) | Not enough data | | **Test Customization** | 7.8 (9 reviews) | Not enough data | #### Management | Feature | JFrog | Mend.io | |---|---|---| | **Automation** | 7.5 (10 reviews) | Not enough data | | **Processes and Workflow** | 7.8 (10 reviews) | Not enough data | | **Reporting** | 6.9 (9 reviews) | Not enough data | #### Agentic AI - Continuous Integration | Feature | JFrog | Mend.io | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | ### Software Supply Chain Security Tools | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Security | Feature | JFrog | Mend.io | |---|---|---| | **Tampering** | Not enough data | Feature Not Available | | **Malicious Code** | Not enough data | Not enough data | | **Verification** | Not enough data | Feature Not Available | | **Security Risks** | Not enough data | Not enough data | #### Tracking | Feature | JFrog | Mend.io | |---|---|---| | **Bill of Materials** | Not enough data | Not enough data | | **Audit Trails** | Not enough data | Not enough data | | **Monitoring** | Not enough data | Not enough data | ### Application Security Posture Management (ASPM) | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Risk management - Application Security Posture Management (ASPM) | Feature | JFrog | Mend.io | |---|---|---| | **Vulnerability Management** | Not enough data | Not enough data | | **Risk Assessment and Prioritization** | Not enough data | Not enough data | | **Compliance Management** | Not enough data | Not enough data | | **Policy Enforcement** | Not enough data | Not enough data | #### Integration and efficiency - Application Security Posture Management (ASPM) | Feature | JFrog | Mend.io | |---|---|---| | **Integration with Development Tools** | Not enough data | Not enough data | | **Automation and Efficiency** | Not enough data | Not enough data | #### Reporting and Analytics - Application Security Posture Management (ASPM) | Feature | JFrog | Mend.io | |---|---|---| | **Trend Analysis** | Not enough data | Not enough data | | **Risk Scoring** | Not enough data | Not enough data | | **Customizable Dashboards** | Not enough data | Not enough data | #### Agentic AI - Application Security Posture Management (ASPM) | Feature | JFrog | Mend.io | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | ### Software Bill of Materials (SBOM) | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Functionality - Software Bill of Materials (SBOM) | Feature | JFrog | Mend.io | |---|---|---| | **Format Support** | Not enough data | Not enough data | | **Annotations** | Not enough data | Not enough data | | **Attestation** | Not enough data | Not enough data | #### Management - Software Bill of Materials (SBOM) | Feature | JFrog | Mend.io | |---|---|---| | **Monitoring** | Not enough data | Not enough data | | **Dashboards** | Not enough data | Not enough data | | **User Provisioning** | Not enough data | Not enough data | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Agentic AI - Static Code Analysis | Feature | JFrog | Mend.io | |---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | ### AI Security Solutions | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Model Protection - AI Security Solutions | Feature | JFrog | Mend.io | |---|---|---| | **Input Hardening** | Not enough data | Feature Not Available | | **Input/Output Inspection** | Not enough data | Feature Not Available | | **Integrity Monitoring** | Not enough data | Feature Not Available | | **Model Access Control** | Not enough data | Feature Not Available | #### Runtime Monitoring - AI Security Solutions | Feature | JFrog | Mend.io | |---|---|---| | **AI Behavior Anomaly Detection** | Not enough data | Feature Not Available | | **Audit Trail** | Not enough data | Feature Not Available | #### Policy Enforcement and Compliance - AI Security Solutions | Feature | JFrog | Mend.io | |---|---|---| | **Scalable Governance** | Not enough data | Not enough data | | **Integrations** | Not enough data | Feature Not Available | | **Shadow AI** | Not enough data | Not enough data | | **Policy‑as‑Code for AI Assets** | Not enough data | Not enough data | ### Cloud Security | Product | Score | Reviews | |---|---|---| | **JFrog** | N/A | N/A | | **Mend.io** | N/A | N/A | #### Cloud Visibility | Feature | JFrog | Mend.io | |---|---|---| | **Data Discovery** | Not enough data | Not enough data | | **Cloud Registry** | Not enough data | Not enough data | | **Cloud Gap Analytics** | Not enough data | Not enough data | #### Security | Feature | JFrog | Mend.io | |---|---|---| | **Data Security** | Not enough data | Not enough data | | **Data loss Prevention** | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | #### Identity | Feature | JFrog | Mend.io | |---|---|---| | **SSO** | Not enough data | Not enough data | | **Governance** | Not enough data | Not enough data | | **User Analytics** | Not enough data | Not enough data | --- ## Categories **Shared Categories (4):** [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) **Unique to JFrog (10):** [DevOps Platforms](https://www.g2.com/categories/devops-platforms), [Repository Management Software](https://www.g2.com/categories/repository-management), [MLOps Platforms](https://www.g2.com/categories/mlops-platforms), [IoT Device Management Platforms](https://www.g2.com/categories/iot-device-management-platforms), [Cloud Infrastructure Automation Software](https://www.g2.com/categories/cloud-infrastructure-automation), [Application Release Orchestration (ARO) Tools](https://www.g2.com/categories/application-release-orchestration), [Container Registry Software](https://www.g2.com/categories/container-registry), [Version Control Hosting Software](https://www.g2.com/categories/version-control-hosting), [Continuous Delivery Tools](https://www.g2.com/categories/continuous-delivery-tools), [Continuous Integration Tools](https://www.g2.com/categories/continuous-integration) **Unique to Mend.io (5):** [AI Security Solutions Software](https://www.g2.com/categories/ai-security-solutions), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Container Security Tools](https://www.g2.com/categories/container-security-tools) --- ## Reviewer Demographics ### By Company Size | Segment | JFrog | Mend.io | |---|---|---| | **Small-Business** | 23.8% | 39.0% | | **Mid-Market** | 29.2% | 34.3% | | **Enterprise** | 46.9% | 26.7% | ### By Industry #### JFrog - **Information Technology and Services:** 31.0% - **Computer Software:** 13.8% - **Financial Services:** 8.6% - **Computer & Network Security:** 6.0% - **Banking:** 3.4% - **Automotive:** 2.6% - **Hospital & Health Care:** 2.6% - **Insurance:** 2.6% - **Internet:** 2.6% - **Accounting:** 1.7% - **Other:** 25.0% #### Mend.io - **Computer Software:** 33.3% - **Information Technology and Services:** 14.3% - **Financial Services:** 6.7% - **Telecommunications:** 4.8% - **Computer & Network Security:** 4.8% - **Automotive:** 2.9% - **Education Management:** 1.9% - **Computer Games:** 1.9% - **Commercial Real Estate:** 1.9% - **Banking:** 1.9% - **Other:** 25.7% --- ## Alternatives ### Alternatives to JFrog - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (893 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2363 reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) — 4.4/5 stars (567 reviews) - [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) — 4.6/5 stars (377 reviews) - [CloudBees](https://www.g2.com/products/cloudbees/reviews) — 4.4/5 stars (621 reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) — 4.4/5 stars (509 reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) — 4.3/5 stars (375 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (795 reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) — 4.4/5 stars (1011 reviews) - [Harness Platform](https://www.g2.com/products/harness-platform/reviews) — 4.6/5 stars (281 reviews) ### Alternatives to Mend.io - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (26 reviews) - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2363 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (893 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (795 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) — 4.6/5 stars (377 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (302 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (310 reviews) --- ## Top Discussions ### JFrog No discussions available for this product. ### Mend.io - Title: [Does the above pricing include all vulnerabilities sources?](https://www.g2.com/discussions/do-you-offer-an-on-premise-option) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "Yes. WhiteSource offering includes the full extent of our database, which supports over 200 programming languages. We aggregate vulnerabilities from the NVD,..." - Title: [What languages and platforms does your solution support?](https://www.g2.com/discussions/is-my-code-secure-with-your-cloud-based-service) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource supports more than 20 programming languages like Java, C++, .NET, PHP, python and more." - Title: [Why are you pricing per contributing developers?](https://www.g2.com/discussions/i-can-t-find-a-plugin-for-my-build-tool-server-does-that-mean-you-cannot-support) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource automates and manages open source components throughout the Software Development Life Cycle (SDLC). Therefore, pricing based on the number of..." - Title: [Do you offer an on-premise option?](https://www.g2.com/discussions/does-whitesource-work-with-all-languages-and-build-tools) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource is a cloud-based service, but we also offer an on-premise option, if necessary. It’s important to emphasize that we do not scan your code. We..." - Title: [What is a contributing developer?](https://www.g2.com/discussions/3104-how-does-whitesource-work) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "“Contributing Developer” means any employee or contractor who at any point (1) accesses or uses the WhiteSource product; (2) develops the code to be scanned..." --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/jfrog-2024-03-28-vs-mend-io)