Mend.io AppSec Platform
Mend.ioExternal reviews
109 reviews
from
and
External reviews are not included in the AWS star rating for the product.
SAST SCA scanning in good budget
What do you like best about the product?
The scan results are pretty accurate and explained in a very good way. We can raise an issues on their support portal which is providing responses to our cases in a quick time.
What do you dislike about the product?
They are yet to merge their SAST and SCA portals which is important.
Their support is missing a chat feature which is important in case of urgent issues.
Documentation should be improved.
Their support is missing a chat feature which is important in case of urgent issues.
Documentation should be improved.
What problems is the product solving and how is that benefiting you?
Mend is scanning our source code as well as the libraries and providing us the list of vulnerabilities present in our source code or libraries where we need to improve and produce a better product.
Mend : A Useful Dependency Management Tool
What do you like best about the product?
Scanning the Dependencies in the Project for Vulnerabilities is a really efficient feature. It keeps track of various dependencies across repositories and also suggests the upgraded version for dependencies to fix the Vulnerabilities. Integration with Gitlab Runners and CI/CD Pipelines has made the process seamless.
What do you dislike about the product?
It sometimes shows invalid vulnerabilities, even when the Dependency version has been upgraded.
Integration and Setup for a complex project and multiple subprojects with Gitlab Repository isn't simple and could be tedious.
Integration and Setup for a complex project and multiple subprojects with Gitlab Repository isn't simple and could be tedious.
What problems is the product solving and how is that benefiting you?
It's helpful in keeping track of the versions of various dependencies and libraries being used. It's really beneficial in keeping the applications secure from vulnerabilities.
Renovate is great
What do you like best about the product?
I enjoy how quickly PRs are opened so I can always have my dependencies up to date. The PRs are informative and using checkboxes for UI is much better than commands.
What do you dislike about the product?
There isn't much to dislike, the configuration file allows me to control pretty much every I could want to. If I had to make one complaint it's that the config file has to be in the root of the repo. It would be nice if I could hide it away in a .github directory or perhaps a .whitesource directory which could also hold my bolt config file.
What problems is the product solving and how is that benefiting you?
Using whitesource bolt and rebovate, I'm able to keep my dependencies updates and safe. I no longer have to worry about managing my dependencies by hand or by relying on GitHubs automated tools which might miss something.
Great tools to help stay on top of the security and updates.
What do you like best about the product?
I like how easy it is to get started and running. The security updates that it provide are valuable for the team and helps us move forward quickly.
What do you dislike about the product?
It's hard to setup with private python repo, we had to fork and then use our custom images in the docker to make the renovatebot working on private repos.
What problems is the product solving and how is that benefiting you?
We are solving the updates on the dependencies and also staying on top of the OSS security updates.
Fantastic dependency management
What do you like best about the product?
Automated and configurable dependency managed, it's very much a set and forget
What do you dislike about the product?
Nothing so far, everything works great, only issues are with the actual git platforms
What problems is the product solving and how is that benefiting you?
We host many client sites all managing the dependencies and keeping them up to date was a full time job, now we're able to automate the whole process
Recommendations to others considering the product:
Great if you have to manage multiple dependencies across any sizeable projects
Excellent tools
What do you like best about the product?
I mostly use Renovate, and the difference between its competitors is enormous.
Monorepos updates, dependencies dashboard and its response time are what I like the most.
Monorepos updates, dependencies dashboard and its response time are what I like the most.
What do you dislike about the product?
Sincerely I cannot think of anything that I dislike.
The only improvement I would like is a deeper GitHub integration like they have with Dependabot, but I recognize that it's an effort from both sides.
The only improvement I would like is a deeper GitHub integration like they have with Dependabot, but I recognize that it's an effort from both sides.
What problems is the product solving and how is that benefiting you?
My repositories are always updated with the latest dependency versions with minimal effort, which saves a huge amount of time. I'm definitely more productive by using it!
Easy to use dependency management
What do you like best about the product?
We are using WhiteSource's Renovate Bot. It quickly integrates into GitHub Actions, supports private npm registries, and allows grouping of packages which is fantastic if you use TypeScript (you can set up renovate to create one PR for @types package and the related package it self).
What do you dislike about the product?
Right now, there is nothing we dislike about Renovate. It does its job, provides a great developer experience, and makes updating internal core packages more effortless than ever before.
What problems is the product solving and how is that benefiting you?
We are using centralized packages for linting, components, etc.. Renovate makes it easier to ensure that every project uses the latest version of those packages as it automatically creates the update PR's.
Amazing!
What do you like best about the product?
It's amazing to have Renovate Bot working on my projects. It's really simple to setup and very useful! An essential tool for keeping things up-to-date and secure.
What do you dislike about the product?
I don't see anything bad - I'm really enjoying all the experience using this tool.
What problems is the product solving and how is that benefiting you?
It's very important to keep dependencies up-to-date in all projects to avoid security issues or things being outdated so this tool is amazing to solve this kind of thing automatically.
The overall language is amazing
What do you like best about the product?
WhiteSource finds dependency in all our configs, even in those use for pipelines like circle ci.
What do you dislike about the product?
There are no changelogs for Docker containers. If this information is available, it would be helpful to include it in the PRs. A focus on CVEs would also be interesting.
What problems is the product solving and how is that benefiting you?
We currently use the WhiteSource bot to keep our Github repos up to date. The bot helps us keep all dependencies up to date.
Recommendations to others considering the product:
It's easy to use and I can't think of a project that doesn't benefit from using WhiteSource software.
It kept my dependencies up-to-date even when I forgot it!
What do you like best about the product?
The Pull Request for dependency updates is excellent!
What do you dislike about the product?
The Renovate itself is great, but the only feature I disliked is it might be great if renovate gave us an option to configure a repo with the dashboard (which only shows logs) instead of using a file!
What problems is the product solving and how is that benefiting you?
I've solved the issue of outdated-dependencies with Renovate!
showing 11 - 20