What do Mend.io and Mindgard sell?

Mend.io sells Mend AI, Mend Renovate, Mend SCA, Mend SAST, DAST and 1 more. Mindgard sells AI Red Teaming and AI Security Expert.

Are Mend.io and Mindgard in the same category?

They share AI model and agent security. Mend.io's primary category is Software composition analysis and Mindgard's is AI model and agent security.

Where are Mend.io and Mindgard headquartered?

Mindgard is headquartered in Boston, United States.

Who are Mend.io and Mindgard sold to?

Mend.io states that it enables developers and security professionals to write secure code and utilize secure components. Mindgard addresses organizations that secure the AI systems they build, buy and use.

What have Mend.io and Mindgard announced recently?

August 13, 2026: Mindgard announced a $30M Series A funding round.

Vendor comparison · 2 companies

Mend.io vs Mindgard

Mend.io sells enterprise AI security and application security software, and secures the full chain from open source dependencies and AI models to container images. Mindgard secures AI models, agents, and applications against exploitable threats. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Mend.io
Mindgard

Add a company

Mend.io vs Mindgard: Products, Customers and Funding Compared
What it sells
	Mend.ioMend.io sells enterprise AI security and application security software, and secures the full chain from open source dependencies and AI models to container images.mend.io	MindgardMindgard secures AI models, agents, and applications against exploitable threats.mindgard.ai
What it sells	Mend AI^[1][3][4]Secures the AI layer with component discovery, system prompt hardening, automated red teaming, and in-app runtime guardrails. Mend Renovate^[1][2][4][5]Creates and manages pull requests automatically across a codebase. Mend SCA^[2][4]Protects repositories and CI/CD pipelines from malicious code packages and exploitable vulnerabilities. Mend SAST^[4]Included in Mend AppSec and feeds reachability-aware intelligence into agentic development tools. DAST^[1][4]An expansion option for Mend AppSec. API Security^[1][4]An expansion option for Mend AppSec.	AI Red Teaming^{[1][4][6][10]}Mindgard's agentic platform red teams AI systems, agents, and infrastructure. AI Security Expert^[9]A subscription that gives a team direct access to a specialist.
Categories
Categories	Software composition analysis (primary category) Static application security testing Dynamic application security testing AI model and agent security	AI model and agent security (primary category) AI firewalls and guardrails
Headquarters
Headquarters	Not stated on its pages	Boston, United States^[2]
Founded
Founded	Not stated on its pages	2022^[2][3]
Ownership and funding
Ownership and funding	Not stated on its pages	Privately held^[2][3]
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	August 13, 2026Mindgard announced a $30M Series A funding round.^[11] March 17, 2026Mindgard announced an expansion of its AI security platform that adds a reconnaissance capability for AI models, agents and applications.^[12]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[12] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Mend.io states that it enables developers and security professionals to write secure code and utilize secure components. Mend.io directs its SBOM and AI-BOM output to security and compliance teams. Mend AI is sold as an add-on to Mend AppSec or as a standalone product.	Mindgard addresses organizations that secure the AI systems they build, buy and use. The offering is aimed at pen-testers who scale AI-focused security testing efforts, and at developers who integrate ongoing testing for secure AI deployments. Customer types shown include global insurance brokerages, healthcare AI platforms, global financial institutions, semiconductor manufacturers and enterprise technology services. Reporting is directed to security, engineering, GRC, and audit teams.
Last verified
Last verified	November 4, 2026	September 27, 2026

Where they overlap

Mend.io and Mindgard are both filed under AI model and agent security.

Where they differ, field by field

Mend.io's primary category is Software composition analysis; Mindgard's is AI model and agent security.
Mend.io is also filed under Static application security testing and Dynamic application security testing. Mindgard is also filed under AI firewalls and guardrails.
Mend.io lists Mend AI, Mend Renovate, Mend SCA, Mend SAST, DAST and 1 more. Mindgard lists AI Red Teaming and AI Security Expert.
Mindgard is headquartered in Boston, United States.
Mindgard was founded in 2022.
Mindgard is privately held.

What it sells: Mend.io

What Mend AI does^[1][3][4]: Mend AI includes AI red teaming to simulate threats like prompt injection and data exfiltration. Mend AI gives visibility into AI components in a codebase, with automated red teaming and runtime guardrails that enforce policy in production. Mend AI can be purchased as an add-on to Mend AppSec or as a standalone product.
What Mend Renovate does^[1][2][4][5]: Mend Renovate Enterprise automates open-source dependency updates and provides Merge Confidence ratings and workflows. Mend Renovate Enterprise is a component of Mend AppSec and can be purchased as a standalone product.
What Mend SCA does^[2][4]: Mend SCA detects malicious packages, including protestware and packages designed to steal data or inject malicious code. Mend SCA supports policy enforcement to stop that risk earlier in development. Mend SCA is included in Mend AppSec.
What Mend SAST does^[4]: Mend SAST is included in Mend AppSec. Mend SAST and Mend SCA feed reachability-aware intelligence into agentic development tools.
What DAST does^[1][4]: DAST is an add-on or expansion option for Mend AppSec. Mend AppSec can be expanded with Mend AI Premium, DAST, API Security, and EOL (End of Life) Support for open source projects.
What API Security does^[1][4]: API Security is an add-on or expansion option for Mend AppSec. Mend AppSec can be expanded with Mend AI Premium, DAST, API Security, and EOL (End of Life) Support for open source projects.

What it sells: Mindgard

What AI Security Expert does^[9]: The expert shows how to run posture assessments, enhance tooling usage, build adversarial skills, and co-pilot red teaming efforts. The subscription includes workshops that show security and data science teams how adversarial techniques work, how agentic systems fail, and how defensive controls can be applied.

Questions about Mend.io and Mindgard

What do Mend.io and Mindgard sell?: Mend.io sells Mend AI, Mend Renovate, Mend SCA, Mend SAST, DAST and 1 more. Mindgard sells AI Red Teaming and AI Security Expert.
Are Mend.io and Mindgard in the same category?: They share AI model and agent security. Mend.io's primary category is Software composition analysis and Mindgard's is AI model and agent security.
Where are Mend.io and Mindgard headquartered?: Mindgard is headquartered in Boston, United States.
When were Mend.io and Mindgard founded?: Mindgard was founded in 2022.
Who owns Mend.io and Mindgard?: Mindgard is privately held.
Who are Mend.io and Mindgard sold to?: Mend.io states that it enables developers and security professionals to write secure code and utilize secure components. Mindgard addresses organizations that secure the AI systems they build, buy and use.
What have Mend.io and Mindgard announced recently?: August 13, 2026: Mindgard announced a $30M Series A funding round.

About Mend.io

Mend.io sells enterprise AI security and application security software, and secures the full chain from open source dependencies and AI models to container images.^{[1][2][3][4][7]}

Mend.io states that AI components, open source dependencies, and production agents have introduced risk that traditional developer security tools were not built to find, test, or govern. Mend.io states that a prompt change, model update, or new input path can introduce vulnerabilities that were not present in the last AI security scan. Mend.io states that the EU AI Act, Executive Order 14028, and the Cyber Resilience Act require verifiable technical evidence that software and AI systems have been inventoried, tested, and secured.^[3]

Mend AppSec secures the code layer, covering source code, open-source dependencies, containers, and AI-generated code. Mend AppSec covers open source risk, proprietary code scanning, and AI visibility in a single workflow. Mend SAST and Mend SCA are both included in Mend AppSec and feed reachability-aware intelligence into agentic development tools. Mend AppSec integrates with AI coding assistants like Cursor, Windsurf, and Copilot to scan code as it is generated, before the code reaches the codebase. Mend AppSec maps dependencies, prioritizes exploitable vulnerabilities, and catches malicious packages and secrets before they reach production. Mend AppSec identifies vulnerable and malicious dependencies and extends coverage into the containers.^{[2][3][4][11]}

Mend SCA protects repositories, CI/CD pipelines, and beyond from malicious code packages and exploitable vulnerabilities. Mend SCA detects malicious packages, including protestware and packages designed to steal data or inject malicious code, and supports policy enforcement to stop that risk earlier in development. Mend.io states that its database supports over 200 programming languages. Mend.io aggregates vulnerabilities from the NVD, dozens of security advisories, and popular open source projects issue trackers.^[2][4]

Mend AI secures the AI layer itself with AI component discovery and risk insights, system prompt hardening with AIWE scoring, automated red teaming, and in-app runtime guardrails. Mend AI includes AI red teaming to simulate threats like prompt injection and data exfiltration. Mend AI gives visibility into AI components in a codebase, with automated red teaming and runtime guardrails that enforce policy in production. Mend AI can be purchased as an add-on to Mend AppSec or as a standalone product. Mend.io surfaces components in a codebase, including packages, AI models, agents, and system prompts, along with shadow dependencies standard tooling misses. Mend.io provides a continuously updated SBOM/AI-BOM, ready for security and compliance teams. Mend.io describes runtime in-application protection as behavioral controls between users and applications in production that monitor live interactions, enforce policy, and block unsafe behavior as it occurs. Mend.io states that automated attack simulations run against every build before it ships, including injection, data leakage, and AI-specific vectors.^{[1][2][3][4][6]}

Mend Renovate creates and manages pull requests automatically across a codebase, with Smart Merge Control to prevent bad updates from shipping. Mend Renovate Enterprise automates open-source dependency updates. Mend Renovate Enterprise automatically creates pull requests for new package versions and provides Merge Confidence ratings and workflows. Mend Renovate Enterprise is a component of Mend AppSec and can be purchased as a standalone product. Mend AppSec can be expanded with Mend AI Premium, DAST, API Security, and EOL (End of Life) Support for open source projects. Mend Renovate keeps dependencies continuously current while Mend AppSec identifies vulnerable and malicious dependencies.^[1][4][5]

The Mend Platform enables users to generate and export a Software Bill of Materials report that specifies the libraries, code packages, and other third-party components used in applications. In the Mend Platform, the CycloneDX standard is embedded with Vulnerability Exploitability eXchange (VEX) data. Mend API 3.0 is a REST-compliant API that enables the automation of workflows. Service users in the Mend Platform are programmatic (machine) users that can communicate with Mend via the APIs with no access to the GUI. The Mend CLI requires a login once for each environment where it runs, which authenticates the user to work in a single organization.^[4][6][8][9]

Mend.io is headquartered in Israel with operations spanning the EU, US, and worldwide. Mend.io has an integrated information security management system incorporating controls for ISO 27001, ISO 27017, and ISO 27701, and these controls are reviewed externally every year. Mend.io's controls are evaluated by Schellman, a firm specializing in annual compliance assessments across various industries. Mend.io states compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the US to which it is subject. Mend.io has partnered with TrustArc as its Dispute Resolution Service Provider for unresolved privacy concerns. Mend.io prices per Contributing Developer. Mend.io's AppSec coverage includes SCA, SAST, secrets detection, and reachability.^[1][4]

Mend.io on the record

About Mindgard

Mindgard secures AI models, agents, and applications against exploitable threats. Mindgard combines offensive security expertise, AI red teaming, attacker intelligence, and automated protection to help organizations discover, assess, and mitigate risk across AI models, agents, and applications. Mindgard was created from more than a decade of AI security research at Lancaster University. Mindgard was founded on pioneering research by Dr. Peter Garraghan at Lancaster University, which showed traditional AppSec could not address AI-specific risks. Mindgard's research has produced 150+ publicly disclosed AI vulnerabilities.^[1][5]

The Mindgard AI security platform finds, validates, and fixes high-impact AI vulnerabilities. Mindgard operates as an autonomous red teamer, continuously mapping, planning, and executing complex, agentic attack workflows. Mindgard profiles AI systems the way attackers do, mapping models, agents, tools, and behaviors before attack execution. Mindgard automates recon and intelligence gathering on AI systems before adversarial testing to discover instructions, tools, and behaviors attackers can exploit. Mindgard identifies AI models, agents, MCP/A2A servers, connected tools, and shadow AI within products. Mindgard tests AI applications, agents and LLMs, including image, audio and multi-modal models. Mindgard uses reconnaissance and agentic attacks to identify how an attacker could manipulate an agent, access sensitive information, misuse tools, bypass controls, or chain weaknesses together.^[1][4][13]

Mindgard validates which weaknesses are exploitable, explains their potential impact, and provides evidence and guidance to help teams close them. AI guardrails and firewalls apply policies to prompts, responses, or actions at runtime, and Mindgard tests whether those controls actually work. Mindgard assesses agents, tools, permissions, APIs, data, and infrastructure beyond the prompt layer. Mindgard evaluates and strengthens AI guardrails and WAF solutions against vulnerabilities.^[1][13]

Mindgard deploys through CI/CD, Burp Suite, or a single click. Mindgard integrates into existing workflows with CI/CD automation and a Burp Suite extension. Mindgard uses APIs and integrations to secure models, agents, and AI applications across development and production environments. Mindgard routes findings through APIs, CI/CD, and enterprise workflow integrations into existing security tooling, ticketing systems, and engineering workflows. Mindgard integrates report viewing into existing systems and SIEM. Mindgard supports SAML/SSO, SCIM provisioning, and RBAC to align security testing with organizational compliance standards.^{[1][4][13][14][15]}

Mindgard generates evidence, remediation guidance, and audit-ready reports mapped to OWASP, MITRE, NIST, and AIUC-1. Mindgard discovers and inventories AI applications, models, agents, and shadow AI across an entire environment. Mindgard prioritizes findings by severity, exposure, affected target, business context, and urgency of remediation. Mindgard gives security, engineering, GRC, and audit teams reporting they can use to demonstrate that AI risks and controls are being continuously evaluated. Security teams use Mindgard to discover and remediate high impact risk.^[4][15]

Mindgard researchers attack AI systems the way a motivated adversary would, using prompt injection, agent hijacking, tool abuse, data extraction and guardrail bypass, chained into attack paths. Mindgard red teams the whole AI system, not just the model. A single LLM application typically takes two to three weeks from kickoff to report in a Mindgard AI pentest. Mindgard sells a dedicated Technical Account Manager as an annual subscription. Mindgard's AI Security Expert subscription gives a team direct access to a specialist. Mindgard training includes instructor-led workshops where teams build agents, test attacks, configure guardrails, and harden defenses.^{[6][7][8][9][10][13]}

A US insurance brokerage used Mindgard to secure nine production AI models. Mindgard secured Fortune 500 design partners. Mindgard expanded its leadership with CEO James Brear, Head of Research Aaron Portnoy, and Offensive Security Lead Rich Smith. Mindgard lists SOC 2 Type 2. Mindgard says 86% of its staff are on the R&D team and 38% hold PhDs.^{[1][5][6][7][8][9][10][13][14]}

Mindgard on the record

Sources

Mend.io full record

[1]mend.ioMend.io · mend.io · undated page, accessed November 4, 2026 · Tier A
[2]Software Supply Chain Security | Mend.ioMend.io · undated page, accessed November 10, 2026 · Tier A
[3]Mend.io | Application Security and AI Security, UnifiedMend.io · undated page, accessed November 10, 2026 · Tier A
[4]Mend.io Pricing: AppSec, AI Security, and RenovateMend.io · undated page, accessed November 10, 2026 · Tier A
[5]Find Your Integration - MendMend.io · undated page, accessed November 10, 2026 · Tier A
[6]The Dependencies SBOM Report | Mend AppSec Guide | Mend.io DocumentationMend.io Documentation · undated page, accessed November 10, 2026 · Tier A
[7]Getting Started with Mend API 3.0 | Mend AppSec Guide | Mend.io DocumentationMend.io Documentation · undated page, accessed November 10, 2026 · Tier A
[8]Manage Service Users in the Mend Platform | Mend AppSec Guide | Mend.io DocumentationMend.io Documentation · undated page, accessed November 10, 2026 · Tier A
[9]Authenticate your login for the Mend CLI | Mend AppSec Guide | Mend.io DocumentationMend.io Documentation · undated page, accessed November 10, 2026 · Tier A
[10]Mend.io: Trust and Compliance - Secure Data ProtectionMend.io · undated page, accessed November 10, 2026 · Tier A
[11]About Mend.io: Securing Code and AI TogetherMend.io · undated page, accessed November 10, 2026 · Tier A
[12]Mend.io Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Mindgard full record

[1]Mindgard - AI Red Teaming & AI Security SolutionsMindgard · undated page, accessed September 27, 2026 · Tier A
[2]About Mindgard: Offensive AI Security CompanyMindgard · undated page, accessed September 27, 2026 · Tier A
[3]Mindgard raises 30 million to protect ai systemsSecurityWeek · securityweek.com · published August 12, 2026 · Tier B
[4]AI Security Software: Advanced AI Testing Tools - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
[5]AI Security Services: Secure Agentic AI Systems - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
[6]AI Red Teaming Services for LLMs and Agents - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
[7]AI Penetration TestingMindgard · undated page, accessed October 26, 2026 · Tier A
[8]AI Security Advisory Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
[9]AI Security Consulting Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
[10]AI Security TrainingMindgard · undated page, accessed October 26, 2026 · Tier A
[11]Mindgard Raises $30M Series AMindgard · published August 13, 2026 · Tier A
[12]Mindgard Unveils First Autonomous AI Security Platform To Identify And Fix Exploitable VulnerabilitiesBusiness Wire · published March 17, 2026 · Tier A
[13]Offensive Security Tool for AI Systems - MindgardMindgard · undated page, accessed November 10, 2026 · Tier A
[14]Mindgard vs Prompt SecurityMindgard · undated page, accessed November 10, 2026 · Tier A
[15]AI Governance & ComplianceMindgard · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.