WhiteSources

WhiteSource, now known as Mend, is a software company that provides solutions for open-source security and license compliance. Founded in 2011, the company helps organizations manage the risks associated with using open-source components in their software development. Their platform identifies open-source libraries and their associated licenses and vulnerabilities, enabling development teams to maintain security and compliance.

The Mend platform automates the discovery of open-source components used within a codebase. It then analyzes these components against a continuously updated database of known security vulnerabilities and license obligations. This allows developers to proactively address potential risks before they impact production environments. The system also helps ensure that the organization adheres to the legal requirements of open-source licenses, preventing potential legal issues.

Mend offers various integrations with popular development tools and workflows, aiming to fit seamlessly into existing software development lifecycles. This includes integration with repositories, build tools, and continuous integration/continuous delivery (CI/CD) pipelines. The goal is to provide developers with actionable insights directly within their familiar work environments. The company's solutions are utilized by a wide range of organizations, from startups to large enterprises, across various industries.