Try our new research platform with insights from 80,000+ expert users

Mend.io vs Prisma Cloud by Palo Alto Networks comparison

The compared Mend.io and Palo Alto Networks solutions aren't in the same category. Mend.io is ranked #7 in SCA , with an average rating of 9.3, and holds a 7.3% mindshare in the category. Palo Alto Networks is ranked #2 in CNAP , with an average rating of 8.5, and holds a 14.5% mindshare. Additionally, 96% of Mend.io users are willing to recommend the solution, compared to 98% of Palo Alto Networks users who would recommend it.
Mend.io
Read 32 Mend.io reviews
  • 6,917 Views
  • 3,113 Comparison Views
96% willing to recommend
Prisma Cloud by Palo Alto N...
Read 111 Prisma Cloud by Palo Alto Networks reviews
  • 23,407 Views
  • 12,406 Comparison Views
98% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 5, 2025

Palo Alto Networks’ Prisma Cloud and Mend.io compete in the cybersecurity and open-source management space. Prisma Cloud has an advantage in comprehensive cloud security, while Mend.io excels in open-source risk management, making it preferable for developers focused on open-source dependency scanning and CI/CD integration.

Features: Mend.io offers precise CVE detection and robust license reporting integrated with CI/CD pipelines for open-source governance. Prisma Cloud provides a holistic cloud security suite covering workload protection, network security, and compliance in hybrid cloud settings.

Room for Improvement: Mend.io users report issues with its notification system, role definitions, and user interface. Prisma Cloud users suggest better integration of acquired solutions, more automated updates, and enhanced API security.

Ease of Deployment and Customer Service: Mend.io is praised for its ease of use and integration in cloud workflows with responsive customer service. Prisma Cloud is noted for comprehensive features but a complex initial setup, with generally positive support experiences.

Pricing and ROI: Mend.io is valued for competitive pricing and reduced management time, delivering strong ROI. Prisma Cloud’s higher cost is justified by its extensive security coverage, although it may be costly for smaller organizations, encouraging a needs-based evaluation against its scalable licensing model.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Mend.io vs. Prisma Cloud by Palo Alto Networks Report (Updated: February 2025).
Buyer's Guide
Mend.io vs. Prisma Cloud by Palo Alto Networks
February 2025
Download the complete report
Helped 872,655 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
Mend.io boosts ROI by automating vulnerability management, enabling faster delivery, cost savings, and improved security insights for organizations.
Sentiment score
7.3
Prisma Cloud enhances security and efficiency, reducing risks and response times, offering significant value despite initial costs.
Mend.io has provided a good return on investment by significantly reducing vulnerabilities.
For more quotes and insights, download the Mend.io report
It eliminates the need for additional hardware, making it a financially and technically sound investment.
Reputation and data security are the two most important things to a financial institution.
We may have prevented a security breach with remediation of the findings.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerAltug Yildirim - PeerSpot reviewer
PS
Mindaugas Dailidonis - PeerSpot reviewer
 

Customer Service

Sentiment score
6.6
Mend.io's customer service excels with quick, knowledgeable support, proactive staff, and effective communication, ideal for large organizations.
Sentiment score
7.1
Prisma Cloud support is praised for responsiveness, though some report slow responses and varying support quality across regions.
They prioritize providing the best experience to large organizations like ours, belonging to the Fortune 100.
I have noticed that the speed to respond has decreased over time.
For more quotes and insights, download the Mend.io report
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
Their technical support comes up with good solutions for every difficulty we face.
Their technical support comes up with great solutions.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerreviewer1252050 - PeerSpot reviewer
BA
Harkunwar Singh - PeerSpot reviewerSachin Mishra - PeerSpot reviewer
 

Scalability Issues

Sentiment score
7.7
Mend.io effectively scales for large projects, integrates with workflows, and supports CI/CD, enhancing security and collaboration.
Sentiment score
7.8
Prisma Cloud scales well across environments, integrates seamlessly, and automates operations, though costs rise with increased licenses.
No quotes available
For more quotes and insights, download the Mend.io report
It's very scalable and very easy to use.
The scalability is also a 10 out of 10.
We are growing extremely quickly, and Prisma Cloud provides all the required services without any need for us to do anything to scale.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
Vijay Shankar Maurya - PeerSpot reviewerSachin Mishra - PeerSpot reviewerreviewer2315604 - PeerSpot reviewer
 

Stability Issues

Sentiment score
7.7
Mend.io offers reliable performance, seamless integration, quick issue resolution, and supports diverse needs with minimal downtime and intuitive interface.
Sentiment score
8.0
Prisma Cloud offers reliable performance and stability, effectively handling environments with rare interruptions and quickly resolved issues.
AI integration in code security tools like Mend.io is still in its early stages and relatively immature.
For more quotes and insights, download the Mend.io report
I would rate it a ten out of ten for stability.
Prisma Cloud is a stable platform.
The solution is stable and is capable of covering large enterprises.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewerreviewer2559921 - PeerSpot reviewerAditya Thakur - PeerSpot reviewerreviewer1411233 - PeerSpot reviewer
 

Room For Improvement

Mend.io requires UI and reporting enhancements, wider language support, improved scanning, automation, and cost-effective pricing for better user experience.
Prisma Cloud needs improvements in documentation, UI, automation, integrations, pricing, and support, with challenges in compliance and cloud support.
The actual challenge is how easy it is to integrate it in the early phase of the software development life cycle.
I strongly recommend that they start working with AI for the reporting part.
The organization decided to consolidate tools and chose Snyk since it provides multiple functionalities in one solution.
For more quotes and insights, download the Mend.io report
From a developer's perspective, especially for organizations like banks developing their applications, ensuring API security before deploying them to the cloud is crucial.
Prisma Cloud is an excellent tool.
Even though documentation was available, it took a while for a new person to understand what integration meant, what will be achieved after the integration, or how the integration needed to be done on the Azure or AWS side.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
SR
reviewer1252050 - PeerSpot reviewermeetharoon - PeerSpot reviewerGideon Crous - PeerSpot reviewerreviewer2540838 - PeerSpot reviewer
HM
 

Setup Cost

Mend.io offers a competitive yearly pricing model based on developer count, appealing for enterprises but pricey for startups.
Prisma Cloud is expensive but valued for comprehensive security, flexible licensing, and potential cost savings in multi-cloud environments.
The cost of Mend.io is competitive, being quite low compared to others.
For more quotes and insights, download the Mend.io report
The cost was not on the higher side.
That's why a lot of our clients are shifting from cloud-native to Prisma Cloud: because of its effectiveness and because it is budget-friendly as well.
The solution is very expensive.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewer
HM
Sachin Mishra - PeerSpot reviewerreviewer1411233 - PeerSpot reviewer
 

Valuable Features

Mend.io streamlines vulnerability management with automation, integration, and comprehensive tools for tracking and securing open-source dependencies.
Prisma Cloud enhances security with dynamic identity creation, compliance management, and integration across AWS and CI/CD pipelines.
We find it 100% accurate in detecting vulnerabilities.
It handles Application Security, performing SCA SAST and container scanning.
The features I find most valuable in Mend.io are the ease of use; it is very easy to access and integrate.
For more quotes and insights, download the Mend.io report
What I like most about Prisma Cloud is its zero-day signatures, maximum security, minimal downtime, cloud visibility, control, and ease of deployment.
All five modules are taking a preventative approach to the security of the cloud environment, from the network to the cloud, posture management and workload protection.
We use it with multi-cloud environments, and there are five cloud providers supported, including Amazon Web Services, Oracle, GCP, Azure, and Alibaba.
For more quotes and insights, download the Prisma Cloud by Palo Alto Networks report
meetharoon - PeerSpot reviewer
SR
reviewer1252050 - PeerSpot reviewerBhupendra Nayak - PeerSpot reviewerHarkunwar Singh - PeerSpot reviewerSachin Mishra - PeerSpot reviewer
 

Categories and Ranking

Mend.io
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
32
Ranking in other categories
Application Security Tools (17th), Software Composition Analysis (SCA) (7th), Static Code Analysis (4th), Software Supply Chain Security (1st)
Prisma Cloud by Palo Alto N...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
111
Ranking in other categories
Web Application Firewall (WAF) (8th), Container Security (1st), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Mend.io is designed for Software Composition Analysis (SCA) and holds a mindshare of 7.3%, down 8.2% compared to last year.
Prisma Cloud by Palo Alto Networks, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 14.5% mindshare, down 20.8% since last year.
Software Composition Analysis (SCA) Market Share Distribution
ProductMarket Share (%)
Mend.io7.3%
Black Duck SCA15.7%
Snyk13.2%
Other63.8%
Software Composition Analysis (SCA)
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
Prisma Cloud by Palo Alto Networks14.5%
Wiz23.4%
Microsoft Defender for Cloud10.9%
Other51.2%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

meetharoon - PeerSpot reviewer
Enables smooth management of vulnerabilities and promotes a shift towards a culture of security
We have witnessed Mend.io for its high stability, consistently living up to our expectations in terms of performance and reliability. Our developers have reported very few issues and almost minimal to zero downtime, which is a critical factor for our organization to rely on Mend SCA to secure our applications. We didn't experience any major issues in the stability of the product. This level of dependability is crucial for our hundreds of development teams that need to maintain continuous integration and deployment processes without interruptions. We realize the solution's architecture is designed to support a wide range of use cases, making it suitable for organizations of varying sizes and complexities. As a SaaS (Software as a Service) offering, Mend.io eliminates the need for physical server management, which further contributes to its stability. Users can access the platform without worrying about hardware failures or maintenance issues that can affect on-premises solutions. Moreover, Mend.io's integration capabilities with existing workflows—including IDEs, repositories, and CI/CD pipelines—enhance its stability by providing a seamless user experience. This integration allows teams to incorporate security scanning into their development processes without significant disruptions, which is often a challenge with less stable solutions. Feedback from our developers and architects highlights the tool's effectiveness in reducing open-source software vulnerabilities while maintaining a streamlined development lifecycle. Our organization have experienced improved code quality and faster incident response times as a result of using Mend.io. The platform's intuitive dashboard and management views are also praised by our developers for their usability, contributing to a positive user experience. In short, Mend.io stands out as a dependable and reliable solution in the realm of software composition analysis. Its high stability, combined with robust integration capabilities and user-friendly features, makes it an excellent choice for organizations seeking to enhance their security posture while minimizing operational disruptions.
Read full review
Mohammad Qaw - PeerSpot reviewer
It gives you one console to see all of your assets, review their configurations, and build your processes
Most customers use Prisma Cloud for visibility and compliance. Prisma has so many features, but many organizations do not use them. They primarily use the visibility part to connect all their cloud accounts and hosts for visibility to see if they are missing any security controls or if they have any misconfigurations. You can connect it to cloud environments such as Azure, AWS, Oracle Cloud, Alibaba, etc., or to an on-prem data center. Prisma Cloud gives you so many options to automate processes related to your daily operations. When it comes to cybersecurity, you can automate things with their existing APIs. They also have out-of-the-box integrations with many solutions. I have not seen any limitations. Everything is customizable. You can do whatever you want, defining the reporting and custom use cases. They recently updated the UI, so it's much better than before.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
See recommendations
872,655 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
11%
Insurance Company
5%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise18
By reviewers
Company SizeCount
Small Business37
Midsize Enterprise20
Large Enterprise55
 

Questions from the Community

How does WhiteSource compare with SonarQube?
Red Hat Ceph does well in simplifying storage integration by replacing the need for numerous storage solutions. This solution allows for multiple copies of replicated and coded pools to be kept, ea...
See all answers
How does WhiteSource compare with Black Duck?
We researched Black Duck but ultimately chose WhiteSource when looking for an application security tool. WhiteSource is a software solution that enables agile open source security and license compl...
See all answers
What do you like most about Mend.io?
The best feature is that the Mend R&D team does their due diligence for all the vulnerabilities. In case they observe any important or critical vulnerabilities, such as the Log4j-related vulner...
See all answers
What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
See all answers
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...
See all answers
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...
See all answers
 

Comparisons

SonarQube Server (formerly SonarQube) vs Mend.io Logo
SonarQube Server (formerly SonarQube) vs Mend.io
Compared 20% of the time
Black Duck SCA vs Mend.io Logo
Black Duck SCA vs Mend.io
Compared 10% of the time
JFrog Xray vs Mend.io Logo
JFrog Xray vs Mend.io
Compared 8% of the time
Snyk vs Mend.io Logo
Snyk vs Mend.io
Compared 8% of the time
GitHub Dependabot vs Mend.io Logo
GitHub Dependabot vs Mend.io
Compared 8% of the time
More Mend.io Competitors
Wiz vs Prisma Cloud by Palo Alto Networks Logo
Wiz vs Prisma Cloud by Palo Alto Networks
Compared 14% of the time
Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks Logo
Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks
Compared 10% of the time
Cyera vs Prisma Cloud by Palo Alto Networks Logo
Cyera vs Prisma Cloud by Palo Alto Networks
Compared 7% of the time
CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks Logo
CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks
Compared 5% of the time
Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks Logo
Aqua Cloud Security Platform vs Prisma Cloud by Palo Alto Networks
Compared 4% of the time
More Prisma Cloud by Palo Alto Networks Competitors
 

Product Reports

Buyer's Guide
Mend.io
October 2025
Mend.io reportDownload Mend.io product report
Buyer's Guide
Prisma Cloud by Palo Alto Networks
October 2025
Prisma Cloud by Palo Alto Networks reportDownload Prisma Cloud by Palo Alto Networks product report
 

Also Known As

WhiteSource, Mend SCA, Mend.io Supply Chain Defender, Mend SAST
Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
 

Overview

Mend.io is a software composition analysis tool that secures what developers create. The solution provides an automated reduction of the software attack surface, reduces developer burdens, and accelerates app delivery. Mend.io provides open-source analysis with its in-house and other multiple sources of software vulnerabilities. In addition, the solution offers license and policy violation alerts, has great pipeline integration, and, since it is a SaaS (software as a service), it doesn’t require you to physically maintain servers or data centers for any implementation. Not only does Mend.io reduce enterprise application security risk, it also helps developers meet deadlines faster.

Mend.io Features

Mend.io has many valuable key features. Some of the most useful ones include:

  • Vulnerability analysis
  • Automated remediation
  • Seamless integration
  • Business prioritization
  • Limitless scalability
  • Intuitive interface
  • Language support
  • Integration
  • Continuous monitoring
  • Remediation suggestions
  • Customization

Mend.io Benefits

There are many benefits to implementing Mend.io. Some of the biggest advantages the solution offers include:

  • Easy to use: The Mend.io platform is very user-friendly and easy to set up.
  • Third-party libraries: The solution eases the process of keeping track of all the used third-party dependencies within a product. It not only scans for the pure occurrence (also transitively) but also takes care of licenses and vulnerabilities.
  • Static code analysis: With Mend.io’s static code analysis, you can quickly identify security weaknesses in custom code across desktop, web, and mobile applications.
  • Broad support: Mend.io provides 27 different programming languages and various programming frameworks.
  • Easy integration: Mend.io makes integration very easy with existing DevOps environments and CI/CD pipelines so developers don’t need to manually configure or trigger the scan.
  • Ultra-fast scanning engine: The solution’s scanning engine generates results up to ten times faster than legacy SAST solutions.
  • Unified developer experience: Mend.io has a unified developer experience inside the code repository that shows side-by-side security alerts and remediation suggestions for custom code and open-source code.

Reviews from Real Users

Below are some reviews and helpful feedback written by PeerSpot users currently using the Mend.io solution.

Jeffrey H., System Manager of Cloud Engineering at Common Spirit, says, “Finding vulnerabilities is pretty easy. Mend.io (formerly WhiteSource) does a great job of that and we had quite a few when we first put this in place. Mend.io does a very good job of finding the open-source, checking the versions, and making sure they're secure. They notify us of critical high, medium, and low impacts, and if anything is wrong. We find the product very easy to use and we use it as a core part of our strategy for scanning product code moving toward release.”

PeerSpot reviewer Ben D., Head of Software Engineering at a legal firm, mentions, “The way WhiteSource scans the code is great. It’s easy to identify and remediate open source vulnerabilities using this solution. WhiteSource helped reduce our mean time to resolution since we adopted the product. In terms of integration, it's pretty easy.”

An IT Service Manager at a wholesaler/distributor comments, “Mend.io provides threat detection and an excellent UI in a highly stable solution, with outstanding technical support.”

Another reviewer, Kevin D., Intramural OfficialIntramural at Northeastern University, states, "The vulnerability analysis is the best aspect of the solution."

Mend.io

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

  • Dynamic Workload Identity: Enables unique workload identities for security purposes.
  • Automated Forensics: Offers detailed insights into threats and incidents automatically.
  • Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
  • Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
  • Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

  • Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
  • Centralized Dashboard: Offers unified oversight of multiple cloud environments.
  • Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
  • Seamless CI/CD Integration: Integrates security within development workflows.
  • Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks
 

Sample Customers

Microsoft, Autodesk, NCR, Target, IBM, vodafone, Siemens, GE digital, KPMG, LivePerson, Jack Henry and Associates
Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Buyer's Guide
Mend.io vs. Prisma Cloud by Palo Alto Networks
February 2025
Free Report: Mend.io vs. Prisma Cloud by Palo Alto Networks
Find out what your peers are saying about Mend.io vs. Prisma Cloud by Palo Alto Networks and other solutions. Updated: February 2025.
DOWNLOAD NOW
872,655 professionals have used our research since 2012.
See our Mend.io vs. Prisma Cloud by Palo Alto Networks report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.