Verified User in Computer Software
UC
Verified User in Computer Software
Mid-Market (51-1000 emp.)
"best SCA and SAST tool"
4.5/5
What do you like best about Mend.io?

It is a great tool to scan our binaries, we have been using it for a while now and have liked the solution. It is good to have sbom as a part of SCA scanning portal but I would like to see SAST also intergrated there. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

As of today, we do not see any major issues from mend, one of the concerns we have is that recently support team has not replied back to our tickets for weeks and we have had to escalte it via our partners to get it resolved. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security
AC
Verified User in Computer & Network Security
Mid-Market (51-1000 emp.)
"Mend - Fixing What I Didn't Know Was Broken"
4/5
What do you like best about Mend.io?

Using the CLI unified agent is a breeze and the syntax is easy to understand/follow. The web UI is not only easy on the eyes but the user experience makes it easy to find what you're looking for. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Currently, at least in my use of the product, there are two different portals depending on which product I'm using, SAST vs SCA, which is kind of awkward to bounce between. Review collected by and hosted on G2.com.

Verified User in Telecommunications
UT
Verified User in Telecommunications
Mid-Market (51-1000 emp.)
"Great developers integration"
4.5/5
What do you like best about Mend.io?

I like the developers integration kit- spesifically the repo integration when I can see all my PR and decide on the action plan Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

The first implementation was painful - it took couple of days to fully complete the integration and needed to open support cases to make sure it is completed Review collected by and hosted on G2.com.

Mohd A.
MA
Mohd A.
Cloud Security Architect
Mid-Market (51-1000 emp.)
"Gartner Review"
4/5
What do you like best about Mend.io?

Scanning capabilities, scanning of open source and sending notifications Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Reporting feature needs to have more user friendly reports Review collected by and hosted on G2.com.

DS
Dhananjay S.
Mid-Market (51-1000 emp.)
"Very helpful and supporting to Detect Open Source Vulnerabilities"
5/5
What do you like best about Mend.io?

The quality report & recommendations.

User friendly Interface Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Sometimes rigid process, difficulties in cutomization Review collected by and hosted on G2.com.

Verified User in Computer Software
AC
Verified User in Computer Software
Enterprise (> 1000 emp.)
"Using Mend integration to Continuous Integration system"
4/5
What do you like best about Mend.io?

The API, The Unified agent JAR and the service-oriented attitude from Mend engineering and success managers Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Performance in huge projects (might be solved with workarounds) .

The CLI is running as JAVA jar only.

The dashboard UX is bad. Really need to improve it Review collected by and hosted on G2.com.

Verified User in Commercial Real Estate
UC
Verified User in Commercial Real Estate
Enterprise (> 1000 emp.)
"Industry Leading SCA Tool"
5/5
What do you like best about Mend.io?

Streamlined approach to SCA makes integration easy and informative. New features being added that have incredible value for what you are paying. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

It seems as though sometimes features are released without having much documentation published about it. Review collected by and hosted on G2.com.

Mo F.
MF
Mo F.
DevSecOps Consultant
Enterprise (> 1000 emp.)
"Easy integration with CI/CD and powerful shift-left approach"
4.5/5
What do you like best about Mend.io?

It makes it very easy to break down and analyze all the open source packages that are in client's code with reports and dashboards to easily identify Critical, Highs, Med and Low risks. I also like that it easily integrates with Github and Azure DevOps to the point that I don't have to login to another site or console and I can see issues right on my platform for tracking and remediation Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

The commonality with a lot of SAST tools is the amount of false positives. Review collected by and hosted on G2.com.

Roshan K.
RK
Roshan K.
Mid-Market (51-1000 emp.)
"Saves time, faster, Amazing customer support"
4.5/5
What do you like best about Mend.io?

Customer support.

Integration for other tools. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

UI: Options on UI is not handy or not much presentable. Review collected by and hosted on G2.com.

Rajesh T.
RT
Rajesh T.
Penetration Tester
Enterprise (> 1000 emp.)
"Makes easy to manage your 3rd party libraries"
4/5
What do you like best about Mend.io?

The scans are quick, and a detailed report is provided.

Easy to manage. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

The dashboard/UI would be improved and made more user-friendly. Review collected by and hosted on G2.com.