No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Mend.io enables scanning and collecting third-party libraries, classifying license types, and ensuring third-party software policy compliance.
Its reporting capabilities allow generating open-source license reports with all copyright and license information, including dependencies, in a single click.
Mend.io offers fix suggestions for vulnerabilities, providing specific traces and the best remediation paths.
It features robust inventory management and identification of security vulnerabilities, enhancing overall business security.
Mend.io is easy to set up, making integration and scanning quick and convenient, with seamless CI/CD integration through platforms like Azure.

CONS

Needs better ACL and more role definitions to support large organizations effectively.
Mend.io's functionality could be expanded to include static and dynamic code analysis.
Integration with DevOps tools is complicated, and a lack of preconfigured policy templates results in tedious manual configurations.
Scanning container images and layers needs improvement, along with enhanced identification of library locations in the source code.
The current support for package managers is limited, requiring faster updates when needed.
 

Mend.io Pros review quotes

meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Dec 17, 2025
Once we onboarded to Mend.io, we saw a drastic improvement in the way Mend.io reported the SCA findings.
reviewer1252050 - PeerSpot reviewer
VP at a tech vendor with 5,001-10,000 employees
Oct 27, 2025
The features I find most valuable in Mend.io are the ease of use; it is very easy to access and integrate.
meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Nov 28, 2024
Mend.io is very robust in terms of managing third-party dependencies.
Learn what your peers think about Mend.io. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
SR
Principal Architect at a consultancy with 11-50 employees
May 19, 2025
Mend.io is a security tool that provides security feedback for all tests.
SM
Product Security Architect at Pitney Bowes Inc.
Sep 26, 2023
The best feature is that the Mend R&D team does their due diligence for all the vulnerabilities. In case they observe any important or critical vulnerabilities, such as the Log4j-related vulnerability, we usually get a dedicated email from our R&D team saying that this particular vulnerability has been exploited in the world, and we should definitely check our project for this and take corrective actions.
reviewer1928817 - PeerSpot reviewer
Sr. Manager at a financial services firm with 10,001+ employees
Jul 31, 2022
Mend has reduced our open-source software vulnerabilities and helped us remediate issues quickly. My company's policy is to ensure that vulnerabilities are fixed before it gets to production.
Jeffrey Harker - PeerSpot reviewer
System Manager of Cloud Engineering at Common Spirit
May 12, 2022
We set the solution up and enabled it and we had everything running pretty quickly.
reviewer2165991 - PeerSpot reviewer
Release Manager at a tech vendor with 501-1,000 employees
Apr 23, 2023
What is very nice is that the product is very easy to set up. When you want to implement Mend.io, it just takes a few minutes to create your organization, create your products, and scan them. It's really convenient to have Mend scanning your products in less than one hour.
KW
Principal Security Engineer at Texthelp Ltd.
Jan 10, 2023
There are multiple different integrations there. We use Mend for CI/CD that goes through Azure as well. It works seamlessly. We never have any issues with it.
reviewer1915362 - PeerSpot reviewer
IT Service Manager at a wholesaler/distributor with 51-200 employees
Jul 17, 2022
I am the organizational deployment administrator for this tool, and I, along with other users in our company, especially the security team, appreciate the solution for several reasons. The UI is excellent, and scanning for security threats fits well into our workflow.
 

Mend.io Cons review quotes

meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Dec 17, 2025
We wanted to have certain reports based on our kind of scenario, but the tool did not allow us to create custom reports.
reviewer1252050 - PeerSpot reviewer
VP at a tech vendor with 5,001-10,000 employees
Oct 27, 2025
The tools need to bring down the pricing because software in SaaS or on-prem is becoming a more expensive affair.
meetharoon - PeerSpot reviewer
CEO at a computer software company with 10,001+ employees
Nov 28, 2024
AI integration in code security tools like Mend.io is still in its early stages and relatively immature.
Learn what your peers think about Mend.io. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
SR
Principal Architect at a consultancy with 11-50 employees
May 19, 2025
The main consideration is the cost. The products always have their maturity.
SM
Product Security Architect at Pitney Bowes Inc.
Sep 26, 2023
I would like to have an additional compliance pack. Currently, it does not have anything for the CIS framework or the NIST framework. If we directly run a scan, and it is under the CIS framework, we can directly tell the auditor that this product is now CIS compliant.
reviewer1928817 - PeerSpot reviewer
Sr. Manager at a financial services firm with 10,001+ employees
Jul 31, 2022
Mend supports most of the common package managers, but it doesn't support some that we use. I would appreciate it if they can quickly make these changes to add new package managers when necessary.
Jeffrey Harker - PeerSpot reviewer
System Manager of Cloud Engineering at Common Spirit
May 12, 2022
At times, the latency of getting items out of the findings after they're remediated is higher than it should be.
reviewer2165991 - PeerSpot reviewer
Release Manager at a tech vendor with 501-1,000 employees
Apr 23, 2023
On the reporting side, they could make some improvements. They are making the reports better and better, but sometimes it takes a lot of time to generate a report for our entire organization.
KW
Principal Security Engineer at Texthelp Ltd.
Jan 10, 2023
Mend lets you create custom policies. They're not too complicated to set up, but it would be helpful if they had some preconfigured policies to match what we have in Azure DevOps. That would save us a lot of time. It's tedious to configure the policies manually, and I lack the capacity to do it right now. Other products have preconfigured packs and templates, and Mend doesn't.
reviewer1915362 - PeerSpot reviewer
IT Service Manager at a wholesaler/distributor with 51-200 employees
Jul 17, 2022
We have been looking at how we could improve the automation to human involvement ratio from 60:40 to 70:30, or even potentially 80:20, as there is room for improvement here. We are discussing this internally and with Mend; they are very accommodating to us. We think they openly receive our feedback and do their best to implement our thoughts into the roadmap.