“Contributing Developer” means any employee or contractor who during the term of the agreement accesses or uses Mend.io’s web UI application or any engineer, developer or other person that writes, develops or modifies the Customer’s, or Customer’s affiliate’s, code being scanned or monitored by the Mend AppSec Platform. For the avoidance of doubt, the same individual will not be counted more than once even if acting in two separate roles such as a developer and platform user.

Mend.io enables developers and security professionals to write secure code and utilize secure components, across every area of the SDLC. Therefore, pricing based on the number of Contributing Developers best reflects the impact of our solution, without limiting you on factors such as size of code or number of scans.

No. We take pride in offering transparent, simple, and predictable pricing. We price per Contributing Developer since we know managers have better visibility into the growth of their headcount rather than the size of their software or lines of code.

Mend.io stands out with these unique advantages:

• Secures AI components in your code by detecting and assessing the risks of AI component and by detecting behavioral risks with AI red teaming.
• Secures AI generated code with integrations into AI code editors with agentic SAST and agentic SCA.
• Reduces risk through AI based workflows by driving detection, prioritization, and remediation across the entire platform with AI.
• Holistic platform for full visibility that provides visibility across your entire codebase, including custom code, open source, containers, and AI generated code and components.

It’s an application security platform built for a world where AI is part of how software is developed. That means two things:

1. It handles AI specific risks like insecure AI-generated code, unsafe prompt design, vulnerable model usage, and policy violations tied to AI in your apps.

2. It uses AI to improve AppSec itself by automatically detecting issues, prioritizing real risks, and even remediating them faster than manual methods.

This isn’t a traditional AppSec tool with AI added on top, it’s built to secure modern applications built at the era of AI.

The Mend AI Native AppSec Platform includes all functionality currently in Mend Renovate, Mend SCA, Mend Container, Mend SAST, and the base Mend AI offering (AI model and framework inventories and AI-BoMs).

Yes. In addition to the comprehensive Mend AI Native AppSec Platform, you can add on or expand your capabilities with Mend AI Premium, DAST, API Security, and EOL (End of Life) Support for open source projects. A few other items, such as hosting, services, or custom agreements, may also be an additional charge.

Mend AI Premium is an expanded security solution for AI components. While the base Mend AI offering provides the discovery and inventorying of AI components, Mend AI Premium extends this with additional features including, AI component risk insights, system prompt hardening, AI red teaming to simulate threats like prompt injection and data exfiltration, as well as providing proactive policies and governance to manage AI component risks. It can be purchased as an upgrade to the AI Native AppSec Platform or as a standalone product.

Mend Renovate Enterprise is an enterprise-grade solution that automates open-source dependency updates with full scale automation and support. It automatically creates pull requests for new package versions and provides advanced features like Merge Confidence ratings and workflows that lets you know the impact each dependency update will have on your application with the ability to group and filter updates. Mend Renovate Enterprise is a key component of the AI Native AppSec Platform, but can also be purchased as a standalone product.

Yes. Mend.io’s AI Native AppSec Platform includes the full extent of our database, which supports over 200 programming languages. We aggregate vulnerabilities from the NVD, dozens of security advisories, and popular open source projects issue trackers to make sure you’re always covered.

Pricing for the Mend AI Native AppSec Platform is per contributing developer which does not limit you with code size, number of scans, and number of applications. Limitations of the available expansion options may vary.