Mend.io
Mend.io provides application security and AI security software for code and AI systems.
- Categories
- Application security testing, Software supply chain and SBOM, AI and LLM security, API security
- Based in
- Burlington, United States
- Founded
- 2011
- Ownership
- Private
- Certifications
- ISO 27001, ISO 27017, ISO 27701, SOC 2 Type II
About Mend.io
Mend.io sells application security and AI security software. It provides a unified platform for governing the software that organisations write and the AI they build. The platform covers open source dependencies, AI models, agents, and system prompts. It helps security and compliance teams inventory components, test for vulnerabilities, and produce audit evidence. Mend.io serves enterprises across many industries, including software, financial services, healthcare, and manufacturing. The platform works by continuously discovering components, including shadow dependencies, and generating SBOMs and AI-BOMs. It runs automated attack simulations and AI red teaming on every build. Runtime controls monitor live interactions and block unsafe behaviour. Mend.io also offers Mend Renovate, a family of dependency update tools that automatically creates pull requests for outdated packages. The company holds ISO 27001, ISO 27017, ISO 27701, and SOC 2 Type II certifications.
Products
- Mend AppSecA product that scans code, dependencies, and containers for vulnerabilities and license issues.
- Mend AIA product that discovers AI models, agents, and prompts, tests them with red teaming, and enforces runtime guardrails.
- Mend RenovateA family of tools that automatically updates software dependencies by creating pull requests.
- Mend Renovate CLIA free open source command line tool for basic dependency management.
- Mend Renovate CommunityA free hosted version of Renovate that adds job scheduling and API access.
- Mend Renovate EnterpriseA paid enterprise version of Renovate with advanced security checks and support.
Ownership and deals
- Mend.io acquired Atom SecurityReport on Mend.io buying Atom Security (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.