

Mend.io and Check Point WAF compete in the web security category, with Mend.io having an advantage in software composition analysis due to its integration with development processes, while Check Point WAF excels in AI-driven threat prevention.
Features: Mend.io specializes in software composition analysis and container management, offering automated vulnerability detection and detailed reporting. It integrates seamlessly with developer workflows, supporting over 200 programming languages. Check Point WAF offers AI-driven threat prevention, extensive IT environment integration, and protection without relying on signatures, which enhances threat detection and minimizes false positives.
Room for Improvement: Mend.io users seek more intuitive dashboards, dynamic code analysis, and expanded language support. Policy templates and user interface improvements are also desired. Check Point WAF could improve its user interface, initial setup, and provide better documentation. Users also call for more transparent pricing.
Ease of Deployment and Customer Service: Mend.io is primarily deployed in public cloud environments, known for easy integration and robust support for cloud-native applications. Its customer service is responsive and praised for its speed. Check Point WAF offers versatile deployment options across public, hybrid, and private clouds. While generally well-rated, some users report challenges with immediate responses and language support.
Pricing and ROI: Mend.io is competitively priced, especially for organizations focusing on SCA and CI/CD integration, offering good value. However, costs may increase for those seeking a more consolidated tool. Check Point WAF is perceived as expensive but provides value through robust security and AI features. Both are seen as investments that enhance security and efficiency.
When we are attacked, we can understand how important the solution is.
When you migrate to the cloud, it feels like saving 90% of your time.
Most of the operations happen in the background, so I do not spend much time on it.
Mend.io has provided a good return on investment by significantly reducing vulnerabilities.
They need to increase the number of people for 24/7 support.
They were responsive even before we committed to buying their solution.
I also received full technical support, especially during the implementation.
Critical tickets are responded to within an hour.
They prioritize providing the best experience to large organizations like ours, belonging to the Fortune 100.
I have noticed that the speed to respond has decreased over time.
If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.
They have sufficient resources, and there are no challenges from a scalability perspective.
Check Point CloudGuard WAF's scalability is very good.
Regarding scalability, I would also rate it a ten because in some cases, I have 500 projects inside a single product, so I think it is quite scalable.
It is very stable.
It is very stable, never crashing or giving me an error that I can see.
I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.
Mend.io is very stable; we did not have any issues.
AI integration in code security tools like Mend.io is still in its early stages and relatively immature.
The provider could improve by providing better guidance and support during the configuration process.
Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.
A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.
That's not a limitation of Mend.io; I think that's a general problem with any tool in the market because no tool in the market will actually know what portion of the code I'm actually using from that particular library if it is vulnerable or not.
The actual challenge is how easy it is to integrate it in the early phase of the software development life cycle.
I strongly recommend that they start working with AI for the reporting part.
It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.
It is less costly than Cloudflare, Fortinet, and other vendors.
I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.
The cost of Mend.io is competitive, being quite low compared to others.
Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.
It can protect against zero-day attacks and hidden anomalies.
The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.
We find it 100% accurate in detecting vulnerabilities.
It handles Application Security, performing SCA SAST and container scanning.
The features I find most valuable in Mend.io are the ease of use; it is very easy to access and integrate.
| Product | Mindshare (%) |
|---|---|
| Check Point WAF (formerly CloudGuard WAF) | 0.9% |
| Mend.io | 2.5% |
| Other | 96.6% |


| Company Size | Count |
|---|---|
| Small Business | 56 |
| Midsize Enterprise | 23 |
| Large Enterprise | 36 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 3 |
| Large Enterprise | 22 |
Check Point WAF offers a robust security framework with AI-driven threat detection and seamless integration, protecting applications and APIs in multi-cloud environments.
Effective in preemptively blocking threats through AI and machine learning, Check Point WAF reduces false positives and operational workload. Its integration capabilities and threat intelligence provide comprehensive protection against zero-day attacks, while centralized management facilitates cost-effective and insightful threat reporting.
What are the main features of Check Point WAF?Check Point WAF is employed in industries securing web applications and APIs, especially in multi-cloud environments. It effectively protects backend services, prevents unauthorized access, and monitors traffic, making it suitable for businesses with diverse infrastructures. It ensures compliance with security standards and adapts to fluctuating traffic patterns.
Mend.io integrates seamlessly into development environments, providing open-source dependency scanning, CVE detection, and license management to enhance security and efficiency during code development.
Mend.io delivers comprehensive open-source vulnerability detection and remediation, seamlessly integrating with CI/CD workflows. It equips organizations with tools for software composition analysis and license risk detection, efficiently identifying vulnerabilities and managing policies. Mend.io supports a wide array of programming languages and deployment environments while integrating with developer tools like GitHub, Jenkins, and Azure DevOps to enhance security feedback and decision-making. Its ease of use and rapid setup boost efficiency in managing open-source dependencies and reducing vulnerabilities.
What are Mend.io's Key Features?Mend.io empowers industries such as finance, healthcare, and e-commerce by integrating robust open-source security measures within their development cycles, enhancing their ability to address vulnerabilities swiftly and maintain compliance amidst rigorous regulatory standards.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.