# Mend.io, Snyk vs SonarQube Comparison | | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Star Rating** | 4.3 out of 5 | 4.5 out of 5 | 4.4 out of 5 | | **Total Reviews** | 112 | 132 | 141 | | **Largest Market Segment** | Small-Business (39.0% of reviews) | Mid-Market (45.4% of reviews) | Enterprise (42.0% of reviews) | | **Entry Level Price** | $300.00 1 Contributing Developer (CDs) Per Year | Free | Free | --- ## Top Pros & Cons ### Mend.io Pros: - Scanning Efficiency (8 reviews) - Ease of Use (7 reviews) Cons: - Integration Issues (6 reviews) - Limited Features (3 reviews) ### Snyk Pros: - Vulnerability Detection (3 reviews) - Vulnerability Identification (3 reviews) Cons: - False Positives (2 reviews) - Poor Interface Design (2 reviews) ### SonarQube Pros: - Code Quality (24 reviews) - Features (20 reviews) Cons: - Software Bugs (12 reviews) - Complex Configuration (10 reviews) --- ## Ratings Comparison | Rating | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Meets Requirements** | 8.6 (81 reviews) | 8.7 (94 reviews) | 8.8 (119 reviews) | | **Ease of Use** | 8.3 (82 reviews) | 8.8 (95 reviews) | 8.5 (122 reviews) | | **Ease of Setup** | 8.1 (50 reviews) | 9.1 (58 reviews) | 8.1 (81 reviews) | | **Ease of Admin** | 8.2 (50 reviews) | 8.9 (51 reviews) | 8.5 (67 reviews) | | **Quality of Support** | 8.7 (67 reviews) | 8.7 (79 reviews) | 8.2 (101 reviews) | | **Has the product been a good partner in doing business?** | 8.8 (46 reviews) | 8.8 (48 reviews) | 8.3 (60 reviews) | | **Product Direction (% positive)** | 8.6 (75 reviews) | 8.8 (84 reviews) | 8.6 (115 reviews) | --- ## Pricing ### Mend.io #### Entry-Level Pricing Plan: Mend AI Premium Price: $300.00 1 Contributing Developer (CDs) Per Year Description: Secure AI powered applications.
 AI red teaming, prompt hardening & more Key Features: - AI component inventory - AI component risk insights - System Prompt Hardening [Browse all 3 editions](https://www.g2.com/products/mend-io/pricing) #### Free Trial Yes ### Snyk #### Entry-Level Pricing Plan: FREE - Limited Tests, Unlimited Developers Price: Free Description: For individual developers and small teams looking to secure while they build. Unlimited Developers. Key Features: - 200 Open Source tests per month - 100 Container tests per month - 300 IaC tests per month [Browse all 3 editions](https://www.g2.com/products/snyk/pricing) #### Free Trial No ### SonarQube #### Entry-Level Pricing Plan: Free Price: Free Description: For developers wanting to try SonarQube. Key Features: - Scan of private projects limited to 50k lines of code - Users limited to max. 5 - Architecture management [Browse all 3 editions](https://www.g2.com/products/sonarqube/pricing) #### Free Trial Yes --- ## Features Comparison By Category ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **Mend.io** | 7.3/10 | 15 | | **Snyk** | 7.8/10 | 25 | | **SonarQube** | 7.3/10 | 25 | #### Administration | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **API / Integrations** | 7.6 (7 reviews) | 8.6 (22 reviews) | 7.9 (20 reviews) | | **Extensibility** | 7.7 (8 reviews) | 8.1 (18 reviews) | 6.0 (20 reviews) | #### Analysis | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Reporting and Analytics** | 7.3 (11 reviews) | 8.5 (23 reviews) | 7.4 (21 reviews) | | **Issue Tracking** | 7.6 (11 reviews) | 8.3 (22 reviews) | 8.0 (20 reviews) | | **Static Code Analysis** | 8.2 (11 reviews) | 8.7 (24 reviews) | 9.0 (23 reviews) | | **Code Analysis** | 7.6 (11 reviews) | 8.9 (21 reviews) | 9.1 (23 reviews) | #### Testing | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Command-Line Tools** | 7.2 (10 reviews) | 7.8 (18 reviews) | 6.6 (18 reviews) | | **Manual Testing** | Feature Not Available | 6.5 (14 reviews) | 5.9 (19 reviews) | | **Test Automation** | 7.2 (9 reviews) | 7.8 (19 reviews) | 6.0 (21 reviews) | | **Compliance Testing** | 7.7 (10 reviews) | 8.1 (15 reviews) | 6.9 (18 reviews) | | **Black-Box Scanning** | Not enough data | 6.2 (13 reviews) | 6.8 (17 reviews) | | **Detection Rate** | 7.4 (9 reviews) | 7.5 (19 reviews) | 8.2 (21 reviews) | | **False Positives** | 5.0 (9 reviews) | 6.4 (17 reviews) | 6.7 (23 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | ### Container Security | Product | Score | Reviews | |---|---|---| | **Mend.io** | 8.3/10 | 14 | | **Snyk** | 7.5/10 | 32 | | **SonarQube** | N/A | N/A | #### Administration | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Risk Scoring** | 8.3 (7 reviews) | 8.4 (29 reviews) | Not enough data | | **Secrets Management** | Feature Not Available | Feature Not Available | Not enough data | | **Security Auditing** | 9.1 (9 reviews) | 7.9 (26 reviews) | Not enough data | | **Configuration Management** | 8.0 (10 reviews) | 7.5 (19 reviews) | Not enough data | #### Monitoring | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Continuous Image Assurance** | Feature Not Available | 8.0 (17 reviews) | Not enough data | | **Behavior Monitoring** | Feature Not Available | 6.5 (13 reviews) | Not enough data | | **Observability** | Feature Not Available | 7.1 (15 reviews) | Not enough data | #### Protection | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Dynamic Image Scanning** | 7.9 (8 reviews) | 7.4 (16 reviews) | Not enough data | | **Runtime Protection** | Feature Not Available | 7.5 (17 reviews) | Not enough data | | **Workload Protection** | Feature Not Available | 7.4 (14 reviews) | Not enough data | | **Network Segmentation** | Feature Not Available | 6.9 (12 reviews) | Not enough data | ### Vulnerability Scanner | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | 8.1/10 | 43 | | **SonarQube** | N/A | N/A | #### Performance | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Issue Tracking** | Not enough data | 8.5 (36 reviews) | Not enough data | | **Detection Rate** | Not enough data | 8.5 (40 reviews) | Not enough data | | **False Positives** | Not enough data | 6.7 (32 reviews) | Not enough data | | **Automated Scans** | Not enough data | 9.1 (41 reviews) | Not enough data | #### Network | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Compliance Testing** | Not enough data | 8.1 (25 reviews) | Not enough data | | **Perimeter Scanning** | Feature Not Available | 7.9 (19 reviews) | Not enough data | | **Configuration Monitoring** | Not enough data | 8.2 (20 reviews) | Not enough data | #### Application | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Manual Application Testing** | Feature Not Available | 7.8 (17 reviews) | Not enough data | | **Static Code Analysis** | Not enough data | 8.5 (34 reviews) | Not enough data | | **Black Box Testing** | Not enough data | 7.4 (13 reviews) | Not enough data | #### Agentic AI - Vulnerability Scanner | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### Software Development Analytics Tools | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | 8.0/10 | 35 | #### Functionality | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Repository Integration** | Not enough data | Not enough data | 8.1 (32 reviews) | | **Analytics and Trends** | Not enough data | Not enough data | 8.5 (31 reviews) | | **Productivity Updates** | Not enough data | Not enough data | 8.2 (29 reviews) | #### Management | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Historical Data Consolidation** | Not enough data | Not enough data | Feature Not Available | | **Data Context** | Not enough data | Not enough data | 7.5 (26 reviews) | | **Testing Integration** | Not enough data | Not enough data | 7.9 (29 reviews) | ### Bug Tracking | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | 8.1/10 | 11 | #### Bug Reporting | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **User Reports & Feedback** | Not enough data | Not enough data | 7.7 (10 reviews) | | **Tester Reports & Feedback** | Not enough data | Not enough data | 8.0 (10 reviews) | | **Team Reports & Comments** | Not enough data | Not enough data | 8.3 (10 reviews) | #### Bug Monitoring | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Analytics** | Not enough data | Not enough data | 7.8 (10 reviews) | | **Bug History** | Not enough data | Not enough data | 8.2 (10 reviews) | | **Data Retention** | Not enough data | Not enough data | 8.5 (10 reviews) | #### Agentic AI - Bug Tracking | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **Mend.io** | 8.5/10 | 53 | | **Snyk** | 8.4/10 | 37 | | **SonarQube** | N/A | N/A | #### Functionality - Software Composition Analysis | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Language Support** | 8.5 (45 reviews) | 8.1 (24 reviews) | Not enough data | | **Integration** | 8.5 (47 reviews) | 8.7 (30 reviews) | Not enough data | | **Transparency** | 8.6 (44 reviews) | 8.3 (31 reviews) | Not enough data | #### Effectiveness - Software Composition Analysis | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Remediation Suggestions** | 8.2 (45 reviews) | 8.3 (32 reviews) | Not enough data | | **Continuous Monitoring** | 8.8 (44 reviews) | 8.7 (30 reviews) | Not enough data | | **Thorough Detection** | 8.6 (45 reviews) | 8.2 (32 reviews) | Not enough data | ### Secure Code Review | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | 7.5/10 | 45 | #### Documentation | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Feedback** | Not enough data | Not enough data | 8.0 (42 reviews) | | **Prioritization** | Not enough data | Not enough data | 7.6 (37 reviews) | | **Remediation Suggestions** | Not enough data | Not enough data | 8.3 (38 reviews) | #### Security | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **False Positives** | Not enough data | Not enough data | 6.7 (37 reviews) | | **Custom Compliance** | Not enough data | Not enough data | 7.0 (34 reviews) | | **Agility** | Not enough data | Not enough data | 7.9 (37 reviews) | ### Software Supply Chain Security Tools | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Security | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Tampering** | Feature Not Available | Not enough data | Not enough data | | **Malicious Code** | Not enough data | Not enough data | Not enough data | | **Verification** | Feature Not Available | Not enough data | Not enough data | | **Security Risks** | Not enough data | Not enough data | Not enough data | #### Tracking | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Bill of Materials** | Not enough data | Not enough data | Not enough data | | **Audit Trails** | Not enough data | Not enough data | Not enough data | | **Monitoring** | Not enough data | Not enough data | Not enough data | ### Application Security Posture Management (ASPM) | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | 8.5/10 | 7 | #### Risk management - Application Security Posture Management (ASPM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Vulnerability Management** | Not enough data | Not enough data | 9.3 (5 reviews) | | **Risk Assessment and Prioritization** | Not enough data | Not enough data | Feature Not Available | | **Compliance Management** | Not enough data | Not enough data | 9.0 (5 reviews) | | **Policy Enforcement** | Not enough data | Not enough data | 8.9 (6 reviews) | #### Integration and efficiency - Application Security Posture Management (ASPM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Integration with Development Tools** | Not enough data | Not enough data | 7.8 (6 reviews) | | **Automation and Efficiency** | Not enough data | Not enough data | Feature Not Available | #### Reporting and Analytics - Application Security Posture Management (ASPM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Trend Analysis** | Not enough data | Not enough data | 7.8 (6 reviews) | | **Risk Scoring** | Not enough data | Not enough data | Not enough data | | **Customizable Dashboards** | Not enough data | Not enough data | 8.3 (5 reviews) | #### Agentic AI - Application Security Posture Management (ASPM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | Not enough data | ### Software Bill of Materials (SBOM) | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Functionality - Software Bill of Materials (SBOM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Format Support** | Not enough data | Not enough data | Not enough data | | **Annotations** | Not enough data | Not enough data | Not enough data | | **Attestation** | Not enough data | Not enough data | Not enough data | #### Management - Software Bill of Materials (SBOM) | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Monitoring** | Not enough data | Not enough data | Not enough data | | **Dashboards** | Not enough data | Not enough data | Not enough data | | **User Provisioning** | Not enough data | Not enough data | Not enough data | ### AI Governance Tools | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### AI Compliance | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Regulatory Reporting** | Not enough data | Not enough data | Not enough data | | **Automated Compliance** | Not enough data | Not enough data | Not enough data | | **Audit Trails** | Not enough data | Not enough data | Feature Not Available | #### Risk Management & Monitoring | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **AI Risk Management** | Not enough data | Not enough data | Feature Not Available | | **Real-time Monitoring** | Not enough data | Not enough data | Not enough data | #### AI Lifecycle Management | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Lifecycle Automation** | Not enough data | Not enough data | Feature Not Available | #### Access Control and Security | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Pole-based Access Control (RBAC)** | Not enough data | Not enough data | Not enough data | #### Collaboration and Communication | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Model Sharing and Reuse** | Not enough data | Not enough data | Feature Not Available | #### Agentic AI - AI Governance Tools | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Feature Not Available | | **Decision Making** | Not enough data | Not enough data | Not enough data | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | 6.2/10 | 8 | #### Agentic AI - Static Code Analysis | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | 6.3 (8 reviews) | | **Natural Language Interaction** | Not enough data | Not enough data | 5.7 (7 reviews) | | **Proactive Assistance** | Not enough data | Not enough data | 6.7 (8 reviews) | ### AI Security Solutions | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Model Protection - AI Security Solutions | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Input Hardening** | Feature Not Available | Not enough data | Not enough data | | **Input/Output Inspection** | Feature Not Available | Not enough data | Not enough data | | **Integrity Monitoring** | Feature Not Available | Not enough data | Not enough data | | **Model Access Control** | Feature Not Available | Not enough data | Not enough data | #### Runtime Monitoring - AI Security Solutions | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **AI Behavior Anomaly Detection** | Feature Not Available | Not enough data | Not enough data | | **Audit Trail** | Feature Not Available | Not enough data | Not enough data | #### Policy Enforcement and Compliance - AI Security Solutions | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Scalable Governance** | Not enough data | Not enough data | Not enough data | | **Integrations** | Feature Not Available | Not enough data | Not enough data | | **Shadow AI** | Not enough data | Not enough data | Not enough data | | **Policy‑as‑Code for AI Assets** | Not enough data | Not enough data | Not enough data | ### AI AppSec Assistants | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Performance - AI AppSec Assistants | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Remediation** | Not enough data | Not enough data | Not enough data | | **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | | **Accuracy** | Not enough data | Not enough data | Not enough data | #### Integration - AI AppSec Assistants | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Stack Integration** | Not enough data | Not enough data | Not enough data | | **Workflow Integration** | Not enough data | Not enough data | Not enough data | | **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | ### Cloud Security | Product | Score | Reviews | |---|---|---| | **Mend.io** | N/A | N/A | | **Snyk** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Cloud Visibility | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Data Discovery** | Not enough data | Not enough data | Not enough data | | **Cloud Registry** | Not enough data | Not enough data | Not enough data | | **Cloud Gap Analytics** | Not enough data | Not enough data | Not enough data | #### Security | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Data Security** | Not enough data | Not enough data | Not enough data | | **Data loss Prevention** | Not enough data | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | Not enough data | #### Identity | Feature | Mend.io | Snyk | SonarQube | |---|---|---|---| | **SSO** | Not enough data | Not enough data | Not enough data | | **Governance** | Not enough data | Not enough data | Not enough data | | **User Analytics** | Not enough data | Not enough data | Not enough data | --- ## Categories **Shared Categories (3):** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis) **Unique to Mend.io (6):** [AI Security Solutions Software](https://www.g2.com/categories/ai-security-solutions), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools), [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Container Security Tools](https://www.g2.com/categories/container-security-tools) **Unique to Snyk (4):** [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Container Security Tools](https://www.g2.com/categories/container-security-tools), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner) **Unique to SonarQube (7):** [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Bug Tracking Software](https://www.g2.com/categories/bug-tracking), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [ AI Governance Tools](https://www.g2.com/categories/ai-governance-tools) --- ## Reviewer Demographics ### By Company Size | Segment | Mend.io | Snyk | SonarQube | |---|---|---|---| | **Small-Business** | 39.0% | 35.4% | 18.1% | | **Mid-Market** | 34.3% | 45.4% | 39.9% | | **Enterprise** | 26.7% | 19.2% | 42.0% | ### By Industry #### Mend.io - **Computer Software:** 33.3% - **Information Technology and Services:** 14.3% - **Financial Services:** 6.7% - **Telecommunications:** 4.8% - **Computer & Network Security:** 4.8% - **Automotive:** 2.9% - **Education Management:** 1.9% - **Computer Games:** 1.9% - **Commercial Real Estate:** 1.9% - **Banking:** 1.9% - **Other:** 25.7% #### Snyk - **Computer Software:** 22.3% - **Information Technology and Services:** 20.8% - **Computer & Network Security:** 9.2% - **Hospital & Health Care:** 5.4% - **Financial Services:** 5.4% - **Telecommunications:** 3.1% - **Banking:** 3.1% - **Education Management:** 2.3% - **Internet:** 2.3% - **Retail:** 1.5% - **Other:** 24.6% #### SonarQube - **Information Technology and Services:** 26.7% - **Computer Software:** 20.7% - **Financial Services:** 7.4% - **Banking:** 3.7% - **Computer & Network Security:** 3.0% - **Hospital & Health Care:** 3.0% - **Manufacturing:** 2.2% - **Automotive:** 2.2% - **Aviation & Aerospace:** 2.2% - **Telecommunications:** 2.2% - **Other:** 26.7% --- ## Alternatives ### Alternatives to Mend.io - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2346 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (785 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) — 4.6/5 stars (377 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (308 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews) - [Gearset DevOps](https://www.g2.com/products/gearset-devops/reviews) — 4.7/5 stars (292 reviews) ### Alternatives to Snyk - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (785 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2346 reviews) - [SOOS](https://www.g2.com/products/soos/reviews) — 4.6/5 stars (42 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (308 reviews) - [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews) — 4.1/5 stars (112 reviews) ### Alternatives to SonarQube - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2346 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews) - [Kiuwan Code Security & Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews) — 4.5/5 stars (34 reviews) - [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (308 reviews) - [Dynatrace](https://www.g2.com/products/dynatrace/reviews) — 4.5/5 stars (1363 reviews) --- ## Top Discussions ### Mend.io - Title: [Does the above pricing include all vulnerabilities sources?](https://www.g2.com/discussions/do-you-offer-an-on-premise-option) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "Yes. WhiteSource offering includes the full extent of our database, which supports over 200 programming languages. We aggregate vulnerabilities from the NVD,..." - Title: [What languages and platforms does your solution support?](https://www.g2.com/discussions/is-my-code-secure-with-your-cloud-based-service) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource supports more than 20 programming languages like Java, C++, .NET, PHP, python and more." - Title: [Why are you pricing per contributing developers?](https://www.g2.com/discussions/i-can-t-find-a-plugin-for-my-build-tool-server-does-that-mean-you-cannot-support) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource automates and manages open source components throughout the Software Development Life Cycle (SDLC). Therefore, pricing based on the number of..." - Title: [Do you offer an on-premise option?](https://www.g2.com/discussions/does-whitesource-work-with-all-languages-and-build-tools) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "WhiteSource is a cloud-based service, but we also offer an on-premise option, if necessary. It’s important to emphasize that we do not scan your code. We..." - Title: [What is a contributing developer?](https://www.g2.com/discussions/3104-how-does-whitesource-work) — 1 comment, 1 upvote *(includes official response)* > **Top comment:** "“Contributing Developer” means any employee or contractor who at any point (1) accesses or uses the WhiteSource product; (2) develops the code to be scanned..." ### Snyk - Title: [What is Snyk scanning?](https://www.g2.com/discussions/what-is-snyk-scanning) — 2 comments, 2 upvotes > **Top comment:** "Codebase and open source libraries" - Title: [Is Snyk a SaaS?](https://www.g2.com/discussions/is-snyk-a-saas) — 2 comments > **Top comment:** "No" - Title: [How good is Snyk?](https://www.g2.com/discussions/how-good-is-snyk) — 2 comments > **Top comment:** "very. it's basically like dependabot, but more fleshed out" ### SonarQube No discussions available for this product. --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/mend-io-vs-snyk-vs-sonarqube)