Notifications
Clear all
Topic starter
19/07/2026 2:17 am
I've been tasked with evaluating our SCA tooling. We're currently using a mix of open-source scanners, but management is asking about Mend (WhiteSource).
I've seen a lot of older praise for its database accuracy and policy engine, but also complaints about complexity and slowness. That was a few years back.
From a hands-on perspective in 2026:
* Is the unified agent approach still an advantage, or is it now seen as too monolithic?
* How does it compare to newer, faster tools in CI/CD pipelines? We have a lot of microservices.
* Any major shifts in their open-source vs. paid feature balance?
Looking for recent, practical experience, especially from smaller ops teams. Not interested in sales pitches.