| Category | Function | Share | Rank | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|---|
| Software composition analysis | Developer platform | 14% | 3 of 49 | 15% | 34 | accepted challenger |
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 2 | 0 | 2 |
| GPT-5.4 mini | 1 | 1 | 0 | 1 | 3 |
| Gemini 3.5 Flash | 0 | 2 | 0 | 0 | 2 |
| Perplexity Sonar | 1 | 0 | 1 | 0 | 2 |
| Grok 4.1 Fast | 0 | 2 | 1 | 1 | 4 |
| Mistral Small | 1 | 1 | 1 | 0 | 3 |
| DeepSeek V4 Flash | 0 | 1 | 1 | 1 | 3 |
| Llama 4 Maverick | 1 | 0 | 1 | 0 | 2 |
| Qwen 3.7 Flash | 2 | 1 | 1 | 1 | 5 |
| Kimi K2 | 0 | 2 | 1 | 1 | 4 |
| GLM 4.7 FlashX | 1 | 1 | 0 | 0 | 2 |
| MiniMax M2.5 | 0 | 2 | 0 | 0 | 2 |
Verbatim evidence the judge attached to positive labels.
“Mend.io - Known for automated remediation and dependency updates, with an all-in-one subscription model and AI security features that enable 80% faster remediation.” Llama 4 Maverick · SCA · direct prompt · first choice
“Snyk, Mend.io (formerly WhiteSource), and Sonatype (Nexus IQ/Black Duck) are considered leaders due to their balance of speed, accuracy, and integration” Qwen 3.7 Flash · SCA · negative prompt · first choice
“Mend.io is often cited as the best overall choice for mid-market companies due to its automation and proactive approach.” Mistral Small · SCA · direct prompt · first choice
“the best SCA tool today is Mend.io (formerly WhiteSource)” GLM 4.7 FlashX · SCA · direct prompt · first choice
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“reachability) works well for Java/JavaScript but poorly for Python, Go... Internal benchmarks claim "+46% better" remediation but lack external validation.” Kimi K2 · SCA · negative prompt · soft negative
“While not dead, it's worth noting the product was renamed/rebranded. The older WhiteSource brand may refer to outdated documentation and tools.” DeepSeek V4 Flash · SCA · negative prompt · soft negative
“paid tools like Snyk, Mend, or Sonatype may be better, but they're harder to justify on a tight budget” GPT-5.4 mini · SCA · budget prompt · soft negative
“Some false positives, UI/learning curve; early-stage AI features immature.” Grok 4.1 Fast · SCA · negative prompt · soft negative
Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 85 of the 97 answers that named Mend.io and are not a share of its labels.
347 of the 389 domain citations in answers naming Mend.io came from somebody else's page.
Pages are listed as the models cited them.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Mend.io's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Mend.io, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at mend.io is approved on the spot, any other address is reviewed by hand.
Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.