Try our new research platform with insights from 80,000+ expert users

Mend.io vs Prisma Cloud by Palo Alto Networks comparison

The compared Mend.io and Palo Alto Networks solutions aren't in the same category. Mend.io is ranked #7 in SCA , with an average rating of 9.3, and holds a 7.9% mindshare in the category. Palo Alto Networks is ranked #2 in CNAP , with an average rating of 8.6, and holds a 15.2% mindshare. Additionally, 96% of Mend.io users are willing to recommend the solution, compared to 98% of Palo Alto Networks users who would recommend it.
Mend.io
Read 31 Mend.io reviews
  • 7,527 Views
  • 3,462 Comparison Views
96% willing to recommend
Prisma Cloud by Palo Alto N...
Read 111 Prisma Cloud by Palo Alto Networks reviews
  • 25,382 Views
  • 13,960 Comparison Views
98% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jun 29, 2025

Mend.io and Prisma Cloud by Palo Alto Networks compete in the domain of security solutions, particularly in Software Composition Analysis (SCA) and cloud security. Mend.io seems to have an edge in Software Composition Analysis due to its automation and CI/CD integration, while Prisma Cloud stands out in comprehensive cloud security and management.

Features: Mend.io automates the identification of open-source vulnerabilities and integrates with CI/CD workflows, boosting security and innovation time. Prisma Cloud provides cloud security automation and monitoring across various environments, offering a unified management interface for managing cloud resources and applications.

Room for Improvement: Mend.io could benefit from supporting more programming languages and enhancing its user interface. Prisma Cloud should focus on improving integration efficiency, simplifying complex onboarding processes, and expanding regional data center offerings to boost local compliance and performance.

Ease of Deployment and Customer Service: Mend.io operates seamlessly on public cloud environments and offers excellent customer service, noted for high satisfaction and rapid support. Prisma Cloud provides deployment flexibility for both public and hybrid environments, though user experience and integration can occasionally pose challenges.

Pricing and ROI: Mend.io offers competitive pricing with strong ROI through vulnerability reduction and efficient workflows. In contrast, Prisma Cloud, while more expensive, delivers extensive cloud security solutions suitable for larger enterprises, allowing a favorable ROI when its comprehensive feature set is fully utilized, with a focus on integrated cloud governance.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Mend.io vs. Prisma Cloud by Palo Alto Networks Report (Updated: February 2025).
Buyer's Guide
Mend.io vs. Prisma Cloud by Palo Alto Networks
February 2025
Download the complete report
Helped 865,164 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
Mend.io boosts ROI by automating vulnerability management, enabling faster delivery, cost savings, and improved security insights for organizations.
Sentiment score
7.3
Prisma Cloud enhances security and efficiency, reducing risks and response times, offering significant value despite initial costs.
Mend.io has provided a good return on investment by significantly reducing vulnerabilities.
For more quotes and insights, download the Mend.io report
It eliminates the need for additional hardware, making it a financially and technically sound investment.
Reputation and data security are the two most important things to a financial institution.
We may have prevented a security breach with remediation of the findings.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerAltug Yildirim - PeerSpot reviewer
PS
Mindaugas Dailidonis - PeerSpot reviewer
 

Customer Service

Sentiment score
6.6
Mend.io's customer service excels with quick, knowledgeable support, proactive staff, and effective communication, ideal for large organizations.
Sentiment score
7.1
Prisma Cloud support is praised for responsiveness, though some report slow responses and varying support quality across regions.
They prioritize providing the best experience to large organizations like ours, belonging to the Fortune 100.
For more quotes and insights, download the Mend.io report
Whenever I have issues with the solution, I will get an immediate response from the product team and they will try to close the issue as soon as possible.
When you send them a message, you get a response in a minute or two.
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerreviewer2268216 - PeerSpot reviewerreviewer2272479 - PeerSpot reviewer
BA
 

Scalability Issues

Sentiment score
7.7
Mend.io effectively scales for large projects, integrates with workflows, and supports CI/CD, enhancing security and collaboration.
Sentiment score
7.8
Prisma Cloud scales well across environments, integrates seamlessly, and automates operations, though costs rise with increased licenses.
No quotes available
For more quotes and insights, download the Mend.io report
It's very scalable and very easy to use.
I am highly impressed with the product's scalability.
It's scalable.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
Vijay Shankar Maurya - PeerSpot reviewerreviewer2268216 - PeerSpot reviewerreviewer2293101 - PeerSpot reviewer
 

Stability Issues

Sentiment score
7.7
Mend.io offers reliable performance, seamless integration, quick issue resolution, and supports diverse needs with minimal downtime and intuitive interface.
Sentiment score
8.0
Prisma Cloud offers reliable performance and stability, effectively handling environments with rare interruptions and quickly resolved issues.
AI integration in code security tools like Mend.io is still in its early stages and relatively immature.
For more quotes and insights, download the Mend.io report
I cannot recall any downtime with the solution.
I would rate it a ten out of ten for stability.
Prisma Cloud is stable.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerreviewer1377333 - PeerSpot reviewerreviewer2559921 - PeerSpot reviewerreviewer2272479 - PeerSpot reviewer
 

Room For Improvement

Mend.io requires UI and reporting enhancements, wider language support, improved scanning, automation, and cost-effective pricing for better user experience.
Prisma Cloud needs improvements in documentation, UI, automation, integrations, pricing, and support, with challenges in compliance and cloud support.
The actual challenge is how easy it is to integrate it in the early phase of the software development life cycle.
The organization decided to consolidate tools and chose Snyk since it provides multiple functionalities in one solution.
For more quotes and insights, download the Mend.io report
It is a SaaS solution, but some of my clients have a local regulatory requirement, and they want to install it locally on their premises.
From a developer's perspective, especially for organizations like banks developing their applications, ensuring API security before deploying them to the cloud is crucial.
Prisma Cloud is an excellent tool.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
SR
meetharoon - PeerSpot reviewerGovinda Mengji - PeerSpot reviewerGideon Crous - PeerSpot reviewerreviewer2540838 - PeerSpot reviewer
 

Setup Cost

Mend.io offers a competitive yearly pricing model based on developer count, appealing for enterprises but pricey for startups.
Prisma Cloud is expensive but valued for comprehensive security, flexible licensing, and potential cost savings in multi-cloud environments.
The cost of Mend.io is competitive, being quite low compared to others.
For more quotes and insights, download the Mend.io report
The cost was not on the higher side.
That's why a lot of our clients are shifting from cloud-native to Prisma Cloud: because of its effectiveness and because it is budget-friendly as well.
The solution is very expensive.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewer
HM
Sachin Mishra - PeerSpot reviewerreviewer1411233 - PeerSpot reviewer
 

Valuable Features

Mend.io streamlines vulnerability management with automation, integration, and comprehensive tools for tracking and securing open-source dependencies.
Prisma Cloud enhances security with dynamic identity creation, compliance management, and integration across AWS and CI/CD pipelines.
We find it 100% accurate in detecting vulnerabilities.
It handles Application Security, performing SCA SAST and container scanning.
For more quotes and insights, download the Mend.io report
Identifying misconfigurations and vulnerabilities at the first stage itself will help the organization save time and money - which is highly appreciated.
I have one example of a threat that Prisma proactively prevented. In 2021, Prisma discovered and resolved a Log4J vulnerability shortly after it was introduced.
CSPM can audit the current cloud configuration, identify misconfigurations, and assess risk.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewer
SR
reviewer2268216 - PeerSpot reviewerreviewer2272479 - PeerSpot reviewerManjeet Yadav - PeerSpot reviewer
 

Categories and Ranking

Mend.io
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
31
Ranking in other categories
Application Security Tools (17th), Software Composition Analysis (SCA) (7th), Static Code Analysis (4th), Software Supply Chain Security (1st)
Prisma Cloud by Palo Alto N...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
111
Ranking in other categories
Web Application Firewall (WAF) (6th), Container Security (1st), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Mend.io is designed for Software Composition Analysis (SCA) and holds a mindshare of 7.9%, down 8.2% compared to last year.
Prisma Cloud by Palo Alto Networks, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 15.2% mindshare, down 20.6% since last year.
Software Composition Analysis (SCA)
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

meetharoon - PeerSpot reviewer
Enables smooth management of vulnerabilities and promotes a shift towards a culture of security
We have witnessed Mend.io for its high stability, consistently living up to our expectations in terms of performance and reliability. Our developers have reported very few issues and almost minimal to zero downtime, which is a critical factor for our organization to rely on Mend SCA to secure our applications. We didn't experience any major issues in the stability of the product. This level of dependability is crucial for our hundreds of development teams that need to maintain continuous integration and deployment processes without interruptions. We realize the solution's architecture is designed to support a wide range of use cases, making it suitable for organizations of varying sizes and complexities. As a SaaS (Software as a Service) offering, Mend.io eliminates the need for physical server management, which further contributes to its stability. Users can access the platform without worrying about hardware failures or maintenance issues that can affect on-premises solutions. Moreover, Mend.io's integration capabilities with existing workflows—including IDEs, repositories, and CI/CD pipelines—enhance its stability by providing a seamless user experience. This integration allows teams to incorporate security scanning into their development processes without significant disruptions, which is often a challenge with less stable solutions. Feedback from our developers and architects highlights the tool's effectiveness in reducing open-source software vulnerabilities while maintaining a streamlined development lifecycle. Our organization have experienced improved code quality and faster incident response times as a result of using Mend.io. The platform's intuitive dashboard and management views are also praised by our developers for their usability, contributing to a positive user experience. In short, Mend.io stands out as a dependable and reliable solution in the realm of software composition analysis. Its high stability, combined with robust integration capabilities and user-friendly features, makes it an excellent choice for organizations seeking to enhance their security posture while minimizing operational disruptions.
Read full review
Mohammad Qaw - PeerSpot reviewer
It gives you one console to see all of your assets, review their configurations, and build your processes
Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
See recommendations
865,164 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
15%
Manufacturing Company
11%
Insurance Company
5%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does WhiteSource compare with SonarQube?
Red Hat Ceph does well in simplifying storage integration by replacing the need for numerous storage solutions. This solution allows for multiple copies of replicated and coded pools to be kept, ea...
See all answers
How does WhiteSource compare with Black Duck?
We researched Black Duck but ultimately chose WhiteSource when looking for an application security tool. WhiteSource is a software solution that enables agile open source security and license compl...
See all answers
What do you like most about Mend.io?
The best feature is that the Mend R&D team does their due diligence for all the vulnerabilities. In case they observe any important or critical vulnerabilities, such as the Log4j-related vulner...
See all answers
What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
See all answers
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...
See all answers
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...
See all answers
 

Comparisons

SonarQube Server (formerly SonarQube) vs Mend.io Logo
SonarQube Server (formerly SonarQube) vs Mend.io
Compared 22% of the time
Black Duck vs Mend.io Logo
Black Duck vs Mend.io
Compared 11% of the time
Snyk vs Mend.io Logo
Snyk vs Mend.io
Compared 9% of the time
GitHub Dependabot vs Mend.io Logo
GitHub Dependabot vs Mend.io
Compared 8% of the time
JFrog Xray vs Mend.io Logo
JFrog Xray vs Mend.io
Compared 7% of the time
More Mend.io Competitors
Wiz vs Prisma Cloud by Palo Alto Networks Logo
Wiz vs Prisma Cloud by Palo Alto Networks
Compared 17% of the time
Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks Logo
Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks
Compared 10% of the time
CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks Logo
CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks
Compared 5% of the time
Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks Logo
Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks
Compared 4% of the time
SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks Logo
SentinelOne Singularity Cloud Security vs Prisma Cloud by Palo Alto Networks
Compared 4% of the time
More Prisma Cloud by Palo Alto Networks Competitors
 

Product Reports

Buyer's Guide
Mend.io
August 2025
Mend.io reportDownload Mend.io product report
Buyer's Guide
Prisma Cloud by Palo Alto Networks
August 2025
Prisma Cloud by Palo Alto Networks reportDownload Prisma Cloud by Palo Alto Networks product report
 

Also Known As

WhiteSource, Mend SCA, Mend.io Supply Chain Defender, Mend SAST
Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
 

Overview

Mend.io is a software composition analysis tool that secures what developers create. The solution provides an automated reduction of the software attack surface, reduces developer burdens, and accelerates app delivery. Mend.io provides open-source analysis with its in-house and other multiple sources of software vulnerabilities. In addition, the solution offers license and policy violation alerts, has great pipeline integration, and, since it is a SaaS (software as a service), it doesn’t require you to physically maintain servers or data centers for any implementation. Not only does Mend.io reduce enterprise application security risk, it also helps developers meet deadlines faster.

Mend.io Features

Mend.io has many valuable key features. Some of the most useful ones include:

  • Vulnerability analysis
  • Automated remediation
  • Seamless integration
  • Business prioritization
  • Limitless scalability
  • Intuitive interface
  • Language support
  • Integration
  • Continuous monitoring
  • Remediation suggestions
  • Customization

Mend.io Benefits

There are many benefits to implementing Mend.io. Some of the biggest advantages the solution offers include:

  • Easy to use: The Mend.io platform is very user-friendly and easy to set up.
  • Third-party libraries: The solution eases the process of keeping track of all the used third-party dependencies within a product. It not only scans for the pure occurrence (also transitively) but also takes care of licenses and vulnerabilities.
  • Static code analysis: With Mend.io’s static code analysis, you can quickly identify security weaknesses in custom code across desktop, web, and mobile applications.
  • Broad support: Mend.io provides 27 different programming languages and various programming frameworks.
  • Easy integration: Mend.io makes integration very easy with existing DevOps environments and CI/CD pipelines so developers don’t need to manually configure or trigger the scan.
  • Ultra-fast scanning engine: The solution’s scanning engine generates results up to ten times faster than legacy SAST solutions.
  • Unified developer experience: Mend.io has a unified developer experience inside the code repository that shows side-by-side security alerts and remediation suggestions for custom code and open-source code.

Reviews from Real Users

Below are some reviews and helpful feedback written by PeerSpot users currently using the Mend.io solution.

Jeffrey H., System Manager of Cloud Engineering at Common Spirit, says, “Finding vulnerabilities is pretty easy. Mend.io (formerly WhiteSource) does a great job of that and we had quite a few when we first put this in place. Mend.io does a very good job of finding the open-source, checking the versions, and making sure they're secure. They notify us of critical high, medium, and low impacts, and if anything is wrong. We find the product very easy to use and we use it as a core part of our strategy for scanning product code moving toward release.”

PeerSpot reviewer Ben D., Head of Software Engineering at a legal firm, mentions, “The way WhiteSource scans the code is great. It’s easy to identify and remediate open source vulnerabilities using this solution. WhiteSource helped reduce our mean time to resolution since we adopted the product. In terms of integration, it's pretty easy.”

An IT Service Manager at a wholesaler/distributor comments, “Mend.io provides threat detection and an excellent UI in a highly stable solution, with outstanding technical support.”

Another reviewer, Kevin D., Intramural OfficialIntramural at Northeastern University, states, "The vulnerability analysis is the best aspect of the solution."

Mend.io

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

  • Dynamic Workload Identity: Enables unique workload identities for security purposes.
  • Automated Forensics: Offers detailed insights into threats and incidents automatically.
  • Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
  • Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
  • Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

  • Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
  • Centralized Dashboard: Offers unified oversight of multiple cloud environments.
  • Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
  • Seamless CI/CD Integration: Integrates security within development workflows.
  • Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks
 

Sample Customers

Microsoft, Autodesk, NCR, Target, IBM, vodafone, Siemens, GE digital, KPMG, LivePerson, Jack Henry and Associates
Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Buyer's Guide
Mend.io vs. Prisma Cloud by Palo Alto Networks
February 2025
Free Report: Mend.io vs. Prisma Cloud by Palo Alto Networks
Find out what your peers are saying about Mend.io vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: February 2025.
DOWNLOAD NOW
865,164 professionals have used our research since 2012.
See our Mend.io vs. Prisma Cloud by Palo Alto Networks report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.