- Primary focus
- Application and AI security platform: SCA, SAST, container scanning, and AI/LLM risk management.
- Deployment
- Self-hosted
- Source model
- Other license
- Pricing model
- freemium
- API available
- Yes
- Windows desktop
- Not specified
- Mobile app
- Not specified
- Overview
- Mend.io (formerly WhiteSource) pioneered software composition analysis and now covers SCA, SAST, container scanning, dependency updates (Mend Renovate), and AI security — red-teaming and runtime guardrails for LLM-based applications.

| Attribute | |||
|---|---|---|---|
| Overview | |||
| Primary focus | Application and AI security platform: SCA, SAST, container scanning, and AI/LLM risk management. | In-app security sensors for IAST, SAST, SCA, and runtime attack detection (ADR). | External attack surface management and web app vulnerability scanning |
| Deployment | Self-hosted | Self-hosted | Not specified |
| Source model | Other license | Other license | Other license |
| Pricing model | freemium | freemium | freemium |
| API available | Yes | Yes | Not specified |
| Windows desktop | Not specified | Not specified | Not specified |
| Mobile app | Not specified | Not specified | Not specified |
| Overview | Mend.io (formerly WhiteSource) pioneered software composition analysis and now covers SCA, SAST, container scanning, dependency updates (Mend Renovate), and AI security — red-teaming and runtime guardrails for LLM-based applications. | Contrast Security, founded by OWASP co-creator Jeff Williams, instruments applications with in-app sensors: Contrast Assess (IAST) and Scan (SAST) find vulnerabilities, Contrast SCA flags risky dependencies, and its ADR/RASP layer detects and blocks attacks in production. | Detectify combines automated DAST scanning with crowdsourced vulnerability research to monitor internet-facing assets and web apps for exploitable issues. |
| Explore further | |||
| Vendor website | Visit vendor ↗ | Visit vendor ↗ | Visit vendor ↗ |
| ITHub profile | View full profile → | View full profile → | View full profile → |
- Primary focus
- In-app security sensors for IAST, SAST, SCA, and runtime attack detection (ADR).
- Deployment
- Self-hosted
- Source model
- Other license
- Pricing model
- freemium
- API available
- Yes
- Windows desktop
- Not specified
- Mobile app
- Not specified
- Overview
- Contrast Security, founded by OWASP co-creator Jeff Williams, instruments applications with in-app sensors: Contrast Assess (IAST) and Scan (SAST) find vulnerabilities, Contrast SCA flags risky dependencies, and its ADR/RASP layer detects and blocks attacks in production.
- Primary focus
- External attack surface management and web app vulnerability scanning
- Deployment
- Not specified
- Source model
- Other license
- Pricing model
- freemium
- API available
- Not specified
- Windows desktop
- Not specified
- Mobile app
- Not specified
- Overview
- Detectify combines automated DAST scanning with crowdsourced vulnerability research to monitor internet-facing assets and web apps for exploitable issues.
ⓘ Confirm technical details and prices with each vendor before making a decision.