Over the years, Mend has transformed as a company, evolving in lockstep with the ever-changing application security landscape. With legacy appsec solutions focused on detecting vulnerabilities with no guidance for resolving them, developer and security teams need a proactive approach with automated appsec baked into the development lifecycle.
Founders Rami Sass, Ron Rymon, and Azi Cohen set out in 2008 with a mission to automate all tasks surrounding the use and security of open-source software, pioneering the software composition analysis (SCA) market before it even had a name. They founded WhiteSource Software in 2011 with the goal of helping companies with their open-source licensing, security, and reporting. Through the years, the company has compiled a very extensive crowdsourced database, which provides information on what other people are doing with vulnerable open-source dependencies. Shifting its focus based on changing market needs, the company moved into supply chain security through its acquisition of Diffend in 2021, and later acquired static application security testing (SAST) startups Xanitizer and DefenseCode to secure entire codebases.
In May 2022, the company rebranded to Mend with a renewed focus on making appsec centered on fixing and enabling enterprises to secure their proprietary and open-source code in an automated, remediation-centric way so developers can spend their time focused on adding business-value. With this rebrand came the launch of the Mend Application Security Platform, the industry’s first automated remediation for custom code security issues.
With the platform, developers are equipped with capabilities that go beyond vulnerability detection and they can see in their real time, native environment, exactly how to fix code word-for-word — reducing application security risk without impacting demanding deadlines. Mend’s rebrand also reflects the company’s commitment to reducing the friction that exists between developer and security teams, providing the tools they need to collaborate more effectively.
How we are different
- Traditional application security products force developers to choose between security and meeting deadlines. The Mend Application Security platform delivers automated remediation for both SCA and SAST, presented directly in the developer’s environment, reducing remediation time by 80 percent. With a cloud architecture that scales to support unlimited apps, developers, and repositories, Mend fits seamlessly, almost invisibly, into developers’ native workflow for maximum ease of use.
- Mend is built on the most comprehensive vulnerability database in the industry, the Mend Vulnerability Database, providing the widest coverage for threats and attack vectors. This provides developers with all the information they need to find, fix, and address open source vulnerabilities. The database covers over 200 programming languages and over 3 million open source components, aggregating information from a variety of sources including the National Vulnerability Database (NVD), security advisories, and open source project issue trackers, multiple times a day.
- In the last three years, Mend has witnessed a fivefold increase in customers and an 800 percent growth in revenue as the company meets an enormous demand across organizations. Mend saw enterprise net retention at 127 percent in 2021 while also adding 350 new customers last year. Mend has over 1,000 customers, including Microsoft, IBM, Comcast, Philips, and more than 25 percent of the Fortune 100.
About this category: Best Cybersecurity Startup
The Cybersecurity Excellence Awards recognize young cybersecurity companies with early proof that their product or service works. There is no limit on age or funding: any company that considers itself a startup can enter.
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region. Entry packages, sponsorship and public votes do not affect the jury's scores.
Community Choice voting for the 2023 season closed on July 10, 2023.
What is the Community Choice Award?
A separate award decided by public vote, independent of the jury awards. Each completed share of a profile on LinkedIn, Facebook or X counted as one vote.
2027 award season
Nominations closeFebruary 27, 2027
Jury winners announcedWeek of March 22
Community Choice voting closesJuly 10, 2027
Nominate in this category
Enter a nomination in Best Cybersecurity Startup. Review takes about one business day.
Help This Nominee Win a Community Choice Award Vote by sharing this page:
4
Community
Votes
Cast your vote by sharing this nominee’s profile on LinkedIn, Facebook, or X, using the buttons above. Each completed social share adds one Community Choice vote.
Votes cast by July 10, 2027 will determine the Community Choice winners (independent of the jury awards). Winners will be announced before Black Hat USA.
What is the Community Choice Award? →
Community Choice is a separate award track from the jury-selected Cybersecurity Excellence Awards. Jury winners are chosen by expert judges, while Community Choice winners are determined by public voting. A nominee may be honored by the jury, the community, or both.
2023 winners in Best Cybersecurity Startup
To keep judging fair, each entry is judged against peers in its segment, so a category can have more than one Gold winner.
