Mend has been an excellent tool, both for OSA and SAST
What do you like best about the product?
I really like the ability to integrate the tooling directly into our source code repository. This allows us to scan hundreds of repositories without needing to configure each of them separately. Onboarding is simple and the updated user interface is attractive and easy to use.
What do you dislike about the product?
SAST capabilities are new and still maturing. Documentation is good, but could use some improvement.
What problems is the product solving and how is that benefiting you?
Mend is helping us maintain an inventory of all of our open source components and is scanning every commit for open source vulnerabilities. Additionally, Mend is helping us identify potential security vulnerabilities in our source code.
There are no comments to display