Mend Bolt for Azure DevOps
Vs. Mend Full Solution

Inventory
Management

Learn more

Vulnerability
Detection

Learn more

Vulnerability
Remediation

Learn more

Open Source
License Compliance

Learn more

Inventory Management
Main Features

Mend Bolt for Azure DevOps Mend Full Solution
Languages and
Frameworks Coverage
Supports 14 languages (C#, Elixir, Erlang, Go, Haskell, JavaScript, Java, Objective C, PHP, Python, R, Ruby, Scala, Swift). Supports over 200 languages, frameworks, and development environments.
Integrations with
DevOps Tools
Integrates with Azure Pipelines. Integrates with IDEs, package managers, repos, build tools, container registries, CI servers, and AST tools.
Dependency
Detection
Displays a flat list of fully resolved dependency tree and manifest files. Fully resolves dependency tree and manifest files, including undeclared dependencies.
Automated Policy
Enforcement
X Initiate automated workflows based on severity level, license types, library age, and more.
Reporting Inventory, vulnerabilities, and licenses report per build. Dozens of built-in reports at the project, product or organization level, including: inventory report, due diligence report, risk and attribution reports and even trend reports.

Vulnerability Detection
Main Features

Mend Bolt for Azure DevOps Mend Full Solution
Identifying
Vulnerabilities
Aggregates dozens of sources: NVD, security advisories, and open source issue trackers. Expert analysis to determine impact and credibility. Aggregates dozens of sources: NVD, security advisories, and open source issue trackers. Expert analysis to determine impact and credibility.
Accuracy and
False Positives
Accurate association of vulnerabilities to specific versions for zero false positives. Accurate association of vulnerabilities to specific versions for zero false positives.
Real-Time Alerts X Real-time alerts, including Initiating automated workflows upon detection. Components and vulnerabilities databases are updated daily to provide the most updated information.

Vulnerability Remediation
Main Features

Mend Bolt for Azure DevOps Mend Full Solution
Prioritization X Prioritize detected vulnerabilities by analyzing whether your proprietary code is actually making calls to the vulnerable functionality, reducing security alerts by 70% to 85%.
Suggested fixes Provides one suggested link to patches, specific source files and newer versions that fix the issue, and recommended code changes which block vulnerable methods. We even suggest changes to your system configuration to block exploitation. Provides one suggested link to patches, specific source files and newer versions that fix the issue, and recommended code changes which block vulnerable methods. We even suggest changes to your system configuration to block exploitation.
Auto-generation
of Pull Requests
X Receive automated Pull Requests (PR) whenever dependencies need updating or on an ongoing scheduled basis.

License Compliance
Main Features

Mend Bolt for Azure DevOps Mend Full Solution
Real-Time Alerts X Get real-time alerts when a component with an unwanted license is added to your software
Auditing X Offers a wide range of reports built for all relevant organizational roles. Provides visibility for internal teams—R&D, IT, security, legal, management. Offers visibility for compliance auditors and due diligence investigators. Automates attribution notices for deployment.