It's been two months since this profile received a new review

Mend.io Reviews & Product Details

Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI generated code and embedded AI components, drives risk reduction through AI powered remediation, automates compliance, and provides a holistic enterprise scale view of risks and clear actions for developers across your entire codebase. Learn more at www.mend.io

Seller

Mend

Languages Supported

English

Product Description

Mend.io delivers the first AI native application security platform built for software created by both humans and machines. It empowers organizations to secure AI generated code and embedded AI components like models, agents, MCPs, and RAG pipelines. The unified platform brings together comprehensive capabilities including AI security, SAST, SCA, container scanning, and Mend Renovate providing development and security teams complete visibility into risks across their codebase. With AI powered remediation and prioritization workflows, teams are enabled to quickly resolve issues and reduce risk. With a simple, predictable price model, eliminating per-module costs and minimal reliance on expensive professional services Mend.io is a scalable, proactive, developer-friendly platform for modern AppSec—all in a single platform.

Overview by

Na'ama Nir

Discussions

Mend.io Community

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

Return on Investment

16 months

View More Pricing Information

Top-Rated Alternatives

View All Alternatives

Mend.io Media

The Mend Platform Security Dashboard provides a high‑level overview and analytics for SCA, SAST, and IMAGE scan findings across your entire Organization.

The Value Dashboard provides clear remediation insights and tracks key security metrics like Mean Time to Remediate (MTTR) and overall Finding Reduction %, so teams can confidently demonstrate progress in securing their applications.

Mend.io Demo - Application List with AI Frameworks

A centralized view of applications across the organization and the AI frameworks they leverage, providing visibility into usage and potential security considerations.

Mend.io Reviews (111)

G2 reviews are authentic and verified.

Here's how.

Israel Sebastián E.

Software Engineer Intern

Small-Business (50 or fewer emp.)

2/12/2025

"Useful tool"

5/5

What do you like best about Mend.io?

Enhances the application security and it's relatively easy to use and integrate. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

it might be helpful to separate pricing for each product Review collected by and hosted on G2.com.

Oliver l.

Aspiring Software Engineer

Mid-Market (51-1000 emp.)

2/17/2025

"good experience with mend.io"

3/5

What do you like best about Mend.io?

an easy-to-use and helpful tool for checking auto-updates and dependencies. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

not quite a good integration and is a bit too pricy. Review collected by and hosted on G2.com.

Verified User in Financial Services

Mid-Market (51-1000 emp.)

5/23/2024

"Mend has been an excellent tool, both for OSA and SAST"

5/5

What do you like best about Mend.io?

I really like the ability to integrate the tooling directly into our source code repository. This allows us to scan hundreds of repositories without needing to configure each of them separately. Onboarding is simple and the updated user interface is attractive and easy to use. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

SAST capabilities are new and still maturing. Documentation is good, but could use some improvement. Review collected by and hosted on G2.com.

Verified User in Banking

Enterprise (> 1000 emp.)

5/21/2024

"Mend is an excellent SCA solution. The prioritize feature saves a lot of time."

4.5/5

What do you like best about Mend.io?

The most helpful feature in Mend.io is the Prioritize feature. It is a fast scan that checks if a vulnerability is reacheable by your code. So you can fix the vulnerabilities that trully affects your application Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

I miss some kind of PoC for the CVEs that mend identifies. Some times it's hard to verify if the vulnerability is a true positive Review collected by and hosted on G2.com.

Christopher M.

Mid-Market (51-1000 emp.)

9/15/2023

"Streamlined Integration for Compliance with Open-Source Licenses & Vulnerability Detection"

5/5

What do you like best about Mend.io?

One of the strengths of Mend.io lies in the simplicity of integrating their unified agent into our Continuous Integration pipeline. This streamlined process, with its commendable support system and verbose documentation, has reduced setup times. We're now efficiently detecting open-source license violations. Coupled with the integration with JIRA, it ensures that open vulnerabilities are promptly and systematically recorded, streamlining our response and tracking processes. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

While the platform functions efficiently, there's scope for modernising the user interface. It would be beneficial to see Mend.io adopt a more contemporary design. However, it's worth noting that this aesthetic aspect doesn't detract from the product's overall usability. Review collected by and hosted on G2.com.

What problems is Mend.io solving and how is that benefiting you?

Mend addresses the challenges associated with open-source license compliance and vulnerability detection in our codebase. Efficiently identifying and alerting us about any license violations ensures that our software remains compliant, reducing potential legal risks. Additionally, its vulnerability detection capabilities enable us to swiftly pinpoint and rectify security vulnerabilities, enhancing our applications' overall safety and integrity.

The integration of Mend.io with JIRA facilitates a systematic recording and tracking of these vulnerabilities, ensuring a structured and effective response from our team. As a result, we maintain a higher standard of code quality and save significant time and resources, allowing us to focus on further development and innovation. This has been crucial for us, especially in the demanding environment of Continuous Integration. Review collected by and hosted on G2.com.

Verified User in Insurance

Mid-Market (51-1000 emp.)

6/11/2024

"Easy to use"

4.5/5

What do you like best about Mend.io?

Easy to use. Helpful. Support is very responsive. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Needing to report to the security team that doesn't understand software. Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

5/21/2024

"Mend is a key part of your development process."

3.5/5

What do you like best about Mend.io?

It's scanning capabilities are more than useful. CSM and support teams are really helpful and reactive. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

Its integration with on-premise tools can be challenging. Review collected by and hosted on G2.com.

Josh B.

Enterprise (> 1000 emp.)

5/15/2024

"Great Product"

5/5

What do you like best about Mend.io?

It is easy to navigate and to find vulnerabilities and violations. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

I know there is a newer version coming, but it could have a bit more functionality. Review collected by and hosted on G2.com.

Praveen V.

Enterprise (> 1000 emp.)

12/8/2023

"Mend Implementation and Review with other tools"

2.5/5

What do you like best about Mend.io?

Mend is one of the good tool and we can use the tool SCA, SAST and container scans and results are good compared to other tools Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

More false positives, difficult intagration, lot of issue in scanner updations and configuration Review collected by and hosted on G2.com.

Verified User in Non-Profit Organization Management

Mid-Market (51-1000 emp.)

11/22/2023

"Leader in the field"

4/5

What do you like best about Mend.io?

Mend has several strengths. First, the company behind it is relatively transparent, helpful, and straightforward. I appreciated that they didn't oversell the product the way several competitors did. The software integrates nicely with Microsoft development tools. Customer support is good and responsive as well. Review collected by and hosted on G2.com.

What do you dislike about Mend.io?

This isn't really a knock, but as a point in time, they are integrating the SCA and the, I think, acquired SAST solutions together into a common platform. Obviously, that's a large effort, and once that is done, it will be even better. Review collected by and hosted on G2.com.