WhiteSource (Mend) logo

    WhiteSource (Mend)

    Freemium
    https://mend.io
    >> OPEN TOOL

    Mend (formerly WhiteSource) is an AI-powered application security platform specializing in software composition analysis and open-source security. It provides automated dependency scanning, license compliance checking, and AI-prioritized vulnerability remediation across software supply chains.

    Category

    Security

    Subcategory

    Vulnerability Scanning

    Free Tier

    Free for open source projects (Mend.io Bolt)

    Paid Plans

    Enterprise pricing, custom quotes

    API Cost

    Not available yet

    Web AppAPICLI

    WhiteSource (Mend) Trust & Security Report

    Certifications, AI-training posture, and security controls, with sourced proof.

    VIEW
    ISO 27001:2013SOC 2 Type II (AICPA SSAE 18 / ISAE 3402)ISO 27017:2015 (cloud security)ISO 27701 (privacy information management)

    Verified against WhiteSource (Mend)'s own trust and security pages. See the full report for sourced proof →

    Region

    Customer data may be stored in third-party hosting facilities in the U.S. or EU based on customer location/preference; AI-Powered Features may route data through Microsoft Azure hosting even where core product data is on AWS. Company operates out of the U.S., Israel, and Europe.

    Trains on Data

    No

    Self-hostable

    No

    Open source vulnerability managementLicense compliance trackingContainer security scanningAutomated dependency updatesSoftware supply chain security

    // MORE IN VULNERABILITY SCANNING

    CodeQL logoCodeQL
    Free
    SecurityVulnerability ScanningVerified
    #code-analysis#security
    GitGuardian logoGitGuardian
    Freemium
    SecurityVulnerability ScanningVerified
    #secrets detection#credential scanning
    Semgrep logoSemgrep
    Freemium
    SecurityVulnerability ScanningVerified
    #static analysis#sast