Mend SCA vs. Veracode

Mend SCA

5 Reviews and Ratings

Veracode

213 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Mend SCA	Score7.6 out of 10	N/A	Mend SCA (formerly WhiteSource) is a solution for agile open source security and license compliance management. Mend SCA integrates with the DevOps pipeline to detect vulnerable open source libraries in real-time. It provides remediation paths and policy automation to speed up time-to-fix. It also prioritizes vulnerability alerts based on usage analysis. Mend supports over 200 programming languages and offer the widest vulnerability database aggregating information from…	N/A
Veracode	Score8.7 out of 10	Mid-Size Companies (51-1,000 employees)	Veracode provides advanced application security solutions, trusted by enterprises to develop and maintain secure software. Its platform identifies exploitable risks, speeds up vulnerability remediation, and reduces security debt at scale using a proprietary AI-assisted remediation engine.	N/A

Pricing

Mend SCA

Veracode

No answers on this topic

No answers on this topic

Pricing Offerings
Mend SCA	Veracode
Free Trial
Yes	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	Yes

No setup fee

No setup fee

—

Developer pricing options available

Community Pulse
Key User Insights
	Mend SCA	Veracode
Considered Both Products	Mend.io No answer on this topic	Veracode Verified User Chose Veracode Veracode is easier to integrate and faster than FOSSA although Mend has more visual features Incentivized Helpful? Verified User Chose Veracode Once we learn how to use Veracode, its simple and very efficient tool to include in any of your devops environments like Dev, QA, Staging , UAT etc. The configuration is much simpler compared to others. The Enterprise license cost is also competitive compared to others. The … Incentivized Helpful? Verified User Chose Veracode Snyk and WhiteSource have fewer features. WhiteSource UI is as bad as Veracode; Snyk is integrated better in GitHub but provides decent results only for JavaScript. The best one for reporting and quality of results across languages is Meterian, which does not appear in this … Incentivized Helpful? Verified User Chose Veracode Acunetix was too difficult to set up and some features were useless for our product. The results weren't clear, so definitely Veracode is better than Acunetix. We use WhiteSource because the level of detail is much better than Veracode. We didn't choose Veracode over them but … Incentivized Helpful?
	Would buy again
	No answers on this topic	92% Would buy again 121 Answers
	Delivers good value for the price
	No answers on this topic	96% Delivers good value for the price 85 Answers
	Happy with the feature set
	No answers on this topic	95% Happy with the feature set 125 Answers
	Lived up to sales and marketing promises
	No answers on this topic	95% Lived up to sales and marketing promises 72 Answers
	Implementation went as expected
No answers on this topic	86% Implementation went as expected 95 Answers

User Ratings
	Mend SCA	Veracode
Likelihood to Recommend	- (0 ratings)	8.6 (138 ratings)
Likelihood to Renew	- (0 ratings)	9.0 (8 ratings)
Usability	- (0 ratings)	7.3 (27 ratings)
Availability	- (0 ratings)	9.1 (1 ratings)
Performance	- (0 ratings)	6.4 (1 ratings)
Support Rating	- (0 ratings)	9.0 (67 ratings)
Implementation Rating	- (0 ratings)	9.1 (3 ratings)
Configurability	- (0 ratings)	6.4 (1 ratings)
Ease of integration	- (0 ratings)	5.5 (1 ratings)
Product Scalability	- (0 ratings)	7.3 (1 ratings)
Vendor post-sale	- (0 ratings)	8.9 (2 ratings)
Vendor pre-sale	- (0 ratings)	8.2 (1 ratings)

User Testimonials
	Mend SCA	Veracode
Likelihood to Recommend	Mend.io No answers on this topic	Veracode No answers on this topic
Pros	Mend.io No answers on this topic	Veracode No answers on this topic
Cons	Mend.io No answers on this topic	Veracode Scan results stability: from one scan to another, additional flaws appear whereas code did not change. Entry points selection: hard to be sure selection is optimal, should be automatized or hidden. Branches management: we currently use sandboxes to scan different branches of our software. Would be good to have real branches management. Incentivized Nicolas Garcin R&D manager Read full review
Likelihood to Renew	Mend.io No answers on this topic	Veracode No answers on this topic
Usability	Mend.io No answers on this topic	Veracode - Almost no setup required and easy to configure - Very easy to use, intuitive UI with integrated analytics and learning portals. - Seamless to review the results, triage them, generate reports. - Security progression of the product/application is tracked via successive scans. - Privileges/Roles nicely fine grained and tightly controlled to let teams "view" only their products. Incentivized Śrinivāsa Rao Kuruba Manager, Information Technology Read full review
Reliability and Availability	Mend.io No answers on this topic	Veracode No answers on this topic
Performance	Mend.io No answers on this topic	Veracode No answers on this topic
Support Rating	Mend.io No answers on this topic	Veracode No answers on this topic
Implementation Rating	Mend.io No answers on this topic	Veracode No answers on this topic
Alternatives Considered	Mend.io No answers on this topic	Veracode No answers on this topic
Scalability	Mend.io No answers on this topic	Veracode No answers on this topic
Return on Investment	Mend.io No answers on this topic	Veracode No answers on this topic
ScreenShots	Mend SCA Screenshots	Veracode Screenshots