Its accurate prioritization and ability to cut through security noise are really impressive. The user interface is intuitive, even for a new user. It also provides options to integrate Mend Renovate, which is a great option. Finally the support is phenomenal. Review collected by and hosted on G2.com.

Performance-wise, it could be better, with less lag during processes. Another issue is the lack of online documentation, which causes users to spend a lot of time resolving an issue or to reach out to support for small queries. Review collected by and hosted on G2.com.

Especially in the age of AI, keeping dependencies up to date is a must — the number of vulnerabilities in third-party libraries is growing at an accelerating rate every single month. Review collected by and hosted on G2.com.

By 2026, the landscape had changed, and GitHub Dependabot had become much more mature than it was before.

In my opinion, Mend Renovate is losing market share because people prefer to use native tools when they store their code on GitHub. Review collected by and hosted on G2.com.

The automated remediation feature (via Mend Remediate/Renovate) is excellent. It doesn't just find vulnerabilities; it automatically generates pull requests with the necessary dependency updates. The integration into our existing CI/CD pipelines is seamless, allowing us to catch open-source vulnerabilities early in the development lifecycle. Review collected by and hosted on G2.com.

The user interface can occasionally feel a bit cluttered, and navigating through deep reporting menus isn't always intuitive. Also, the initial configuration and tuning to reduce noise/false positives took a bit longer than expected. Review collected by and hosted on G2.com.

I like Mend.io's smart vulnerability prioritization and seamless CI/CD integration. It helps developers fix the most critical security issues faster. Review collected by and hosted on G2.com.

Sometimes it generates too many alerts, and initial setup and policy configuration can be a bit complex for new users. Review collected by and hosted on G2.com.

I tried several SCA & SAST scanner tools, Mend had the best reporting functionality out of all of them. Review collected by and hosted on G2.com.

I’ve noticed inconsistencies between the different scan engines when using the CLI. Review collected by and hosted on G2.com.

there are multiple new things that we like

1. container scanning is enabled

2. AI code scanning is enabled Review collected by and hosted on G2.com.

UI needs to be improved.

Number of false positives in some cases.

Support should be improved Review collected by and hosted on G2.com.

The range and breadth of what it offers is very extensive. The SCA vulnerability management is particularly clever, and the ability to start auto-remediating issues is genuinely useful. Review collected by and hosted on G2.com.

Some of the setup with branch management was a little odd and didn't aid with our ways of working Review collected by and hosted on G2.com.

The support team—and our Mend customer success manager, who meets with us every two weeks to address any questions or concerns we may have—is truly amazing. Review collected by and hosted on G2.com.

At this time, I can’t think of anything I dislike about Mend. Review collected by and hosted on G2.com.

Enhances the application security and it's relatively easy to use and integrate. Review collected by and hosted on G2.com.

it might be helpful to separate pricing for each product Review collected by and hosted on G2.com.

an easy-to-use and helpful tool for checking auto-updates and dependencies. Review collected by and hosted on G2.com.

not quite a good integration and is a bit too pricy. Review collected by and hosted on G2.com.