Notifications
Clear all
SAST & Dependency Scanning
1
Posts
1
Users
0
Reactions
5
Views
Topic starter
14/07/2026 7:21 pm
We're currently using Mend (formerly WhiteSource) and our renewal is coming up. The quote jumped quite a bit. Black Duck is now on the table as a potentially more cost-effective option for us.
Has anyone made this switch? I'm especially worried about two things:
First, the setup and learning curve for the team. Second, the false positive rate comparison. We're a small team and can't afford to waste cycles chasing non-issues. Any insight on how they compare for monorepos would be huge.