Mend SCA
Mend SCA gives organizations full visibility and control over open source usage and security - and makes it easy for developers to remediate open source risk directly from the tools they already use. It can issue real-time alerts with automatic remediation capabilities, or even proactively block malicious packages and licensing violations.
Getting started with Mend AppSec Platform
Set Up Sign-In (SSO)
Easily manage secure login access for your organization with seamless SSO integration
Configure Automation Workflows
Automatically enforce security rules and streamline processes
Supported Languages
See supported package managers in the Mend CLI for dependency resolution
Scan using Mend SCA
Run the Mend CLI
Start running Mend CLI to scan your projects
Configuration Parameters
Configure your scanning preferences with Mend CLI
Unified Agent within the CLI
Using the Unified Agent within the Mend CLI
Integrate with Mend SCA
Mend Repository Integrations
Connect your source code repositories with Mend SCA
Manage Global Scan Configuration
Set up scan settings across your organization
Mend API 3.0
Connect your organization with the Mend AppSec Platform API
Review your Mend SCA scan results
Manage your Security Findings
View vulnerabilities identified in your dependencies
SCA Reachability
Prioritize reachable vulnerabilities in your inventory
View Violating SCA Findings
Identify security risks that breach your defined policies