- Companies
- Mend.io
Mend.io Funding, Investors & Competitors
Mend.io has raised $121M across 4 funding rounds, most recently a $75M Series D in April 2021.
Last Mend.io funding round
$75M
Series D · Apr 2021
Cumulative funding Mend.io raised
$121M
across 4 funding rounds
Key investors in Mend.io
M12
83North
Susquehanna Growth Equity
Pitango VC
Peregrine Ventures
Poalim Equity
Oracle Investment Management
About Mend.io
Mend.io, founded in 2011 as WhiteSource, provides an application-security platform for software-development organizations. The Boston- and Tel Aviv-based company began with software composition analysis that identifies vulnerable or noncompliant open-source components and helps developers prioritize and remediate risk. It expanded into software-supply-chain security and static application security testing for proprietary source code, bringing open-source and custom-code analysis into developer and DevOps workflows. Mend sells subscription software to enterprises and technology teams that need vulnerability detection, license-compliance controls, automated remediation and governance across the software-development lifecycle. Its products are designed to integrate with repositories, build pipelines and issue-tracking environments so security checks occur while code is created. WhiteSource acquired Diffend in 2021 and Xanitizer and DefenseCode in 2022, then adopted the Mend.io name to reflect its broader remediation-centered application-security strategy. Atom Security became another acquired component of that platform in 2023.
Founded
2011
HQ
Website
Status
Privately held
Customer focus
B2B
Revenue model
Subscription
Mend.io Funding History
Mend.io has raised a total of $121M across 4 funding rounds.
Mend.io's first fundraising round was a $1M Series A in March 2013. The most recent completed round was a $75M Series D in April 2021.
Mend.io funding rounds
| Date | Stage | Investors | Raised | Deal Summary |
|---|---|---|---|---|
| Apr 2021 | Series D | Pitango VC (lead); Poalim Equity; M12; Susquehanna Growth Equity; 83North | $75M | Mend.io (formerly WhiteSource) is a cybersecurity software company that provides dependency intelligence and security management solutions for software development. The company raised $75 million in Series D funding on March 26, 2021, led by Pitango Venture Capital alongside investors 83North, M12 (Microsoft's Venture Fund), and Susquehanna Growth Equity. This round brought Mend.io's total funding to $123.6 million across six rounds of financing, positioning the company as a significant player in the application security market. |
| Oct 2018 | Series C | Susquehanna Growth Equity (lead); M12; 83North | $35M | Mend.io (formerly WhiteSource) provides a platform for managing compliance and security of open-source software (OSS) in products, automating the OSS lifecycle from selection to remediation. The company offers an AI-native application security platform that secures AI-generated code, automates compliance, and provides risk views for developers. Susquehanna Growth Equity noted Mend.io's platform helps developers and DevOps leaders automate OSS management. Mend.io has been recognized as a leader in software composition analysis by Forrester. Customers include major enterprises, and the company emphasizes prevention-centric models for open source vulnerabilities. In October 2018, Mend.io raised $35 million in a Series C round from investors including 83North, M12 (Microsoft's venture fund), and Susquehanna Growth Equity as the lead. This followed prior rounds: Series B $10M in June 2017 and Series A $1M in February 2013. The company later raised additional funding, including an unattributed VC round and a $75M Series D in March/April 2021 led by Pitango with participation from 83North, M12, and Susquehanna Growth Equity, bringing total funding to approximately $123.6M over six rounds by 2021. |
| Jun 2017 | Series B | 83North (lead); M12 | $10M | WhiteSource (now Mend.io) is an open source security and compliance platform founded in 2011 to help enterprises manage the security and compliance risks of open source components in their software development. The company announced a Series B funding round of $10 million led by 83North in June 2017, with participation from existing investors including M12 (Microsoft Ventures) and Peregrine Ventures. By the time of its Series C announcement in October 2018, WhiteSource reported accelerated revenue growth, tripling year-over-year, reflecting rapid market adoption of its automated open source management solution. The platform serves the enterprise market, with customers including Microsoft, IBM, Comcast, and Pitney Bowes, and was recognized as the leader in the Forrester Wave Software Composition Analysis. The company expanded globally with offices in New York, Boston, and Tel Aviv, and planned additional locations in London and San Francisco. |
| Mar 2013 | Series A | Oracle Investment Management; Peregrine Ventures | $1M | - |
Who has invested in Mend.io?
7 investors have backed Mend.io across its funding rounds, including M12, 83North, Susquehanna Growth Equity, Pitango VC, Peregrine Ventures and Poalim Equity.
Lead investors include Pitango VC, Susquehanna Growth Equity and 83North.
Mend.io Investors
| Investor | HQ | Rounds | Role | First check |
|---|---|---|---|---|
| 3 | Participant | Jun 2017 | ||
| 3 | Lead | Jun 2017 | ||
| 2 | Lead | Oct 2018 | ||
| 1 | Lead | Apr 2021 | ||
| 1 | Participant | Apr 2021 | ||
This data is available for Pro users. Sign up to see all 7 Mend.io investors. Start Free Trial | ||||
Benchmark 350K+ Funding Rounds and Disclosed VC Valuation Multiples
Sign up to see data on 350K+ funding rounds and disclosed revenue and EBITDA valuation multiples, from seed, through growth stage, to pre-IPO.
Start Free TrialAcquisitions by Mend.io
Mend.io has acquired 5 companies to date.
Last acquisition by Mend.io was on December 19th 2023. Mend.io acquired Atom Security for undisclosed valuation.
Latest Acquisitions by Mend.io
| Description | Atom Security is a cybersecurity firm headquartered in Tel Aviv, Israel. It offers managed detection services, vulnerability assessments, and cloud security postures for SMEs. Tools include endpoint protection platforms and SIEM integrations scanning for threats in AWS and Azure environments. Atom Security serves fintech and e-commerce clients with 24/7 SOC operations. | Xanitizer was a German application-security software business developed and sold by RIGS IT GmbH. Its commercial static application security testing product inspected source code, configuration files and web templates for exploitable weaknesses before software reached production. The analyzer supported languages and frameworks used in Java, Scala, JavaScript and TypeScript applications and applied data-flow and taint analysis to trace untrusted inputs to dangerous operations. Development and security teams could use the graphical interface or automate scans through command-line, build-system and continuous-integration integrations, including Jenkins, Ant, Maven, Gradle and SonarQube workflows. Xanitizer combined its proprietary findings with established open-source analysis components and provided visual explanations and remediation guidance. It sold primarily to enterprises and security teams seeking accurate vulnerability detection with fewer false positives. WhiteSource acquired the business and integrated its technology and engineers into a new static application security testing organization in 2022. | DefenseCode was a Zagreb-based application-security software company founded in 2010 by security researcher and programmer Leon Juranić. It developed enterprise tools for finding vulnerabilities in web, desktop and mobile applications through static and dynamic security testing. Its best-known product, ThunderScan, analyzed application source code across multiple programming languages and produced actionable findings intended for security reviews and development workflows. The company also developed WebStrike for black-box and dynamic application testing. DefenseCode served organizations in Europe and North America and distributed its technology through security-service and software-channel relationships. Its tools helped customers identify weaknesses such as injection paths and other exploitable coding flaws before release, supporting secure-development and DevSecOps programs. WhiteSource acquired DefenseCode in early 2022 and placed its technology and team within a new static application security testing engineering group. The acquired Croatian legal entity subsequently became owned by WhiteSource Zagreb. | Diffend is a Prague-based platform for open-source software supply chain security. It scans dependencies for malware, vulnerabilities, and license risks using SBOM generation and real-time monitoring. Diffend serves DevOps teams at GitLab users and European banks, integrating with GitHub, Bitbucket, and Jenkins. Launched in 2021, the tool analyzes 1 million packages weekly with policy enforcement and auto-remediation workflows. | |
| HQ Country | |||||
| HQ City | Tel Aviv | Potsdam | Zagreb | Boston, MA | |
| Deal Date | 19 Dec 2023 | 15 Feb 2022 | 15 Feb 2022 | 20 Apr 2021 | |
| Valuation | undisclosed | undisclosed | undisclosed | undisclosed | |
| EV/Revenue | |||||
| EV/EBITDA | |||||
This data is available for Pro users. Sign up to see all Mend.io acquisitions and their M&A valuation multiples. Start Free Trial | |||||
Mend.io Competitors
Mend.io competitors include listed companies like IBM and CrowdStrike, and private ones like Safe Superintelligence, Socure, Dream Security and Forter.
| Company | HQ | Status | Revenue | EBITDA | Valuation | Revenue Multiple |
|---|---|---|---|---|---|---|
| Private | - | - | $32B | - | ||
| Private | $315M | - | $5.2B | - | ||
| Private | $100M | - | $3B | - | ||
| Private | $200M | - | $3B | 15.0x | ||
| Publicly listed | $68B | $17B | $232B | 4.1x | ||
| Publicly listed | $4.8B | ($12M) | $222B | 38.0x |
Mend.io Public Comps
Mend.io is still privately-owned, but its public comps include SAP, Palo Alto Networks, IBM, CrowdStrike, Salesforce, ServiceNow, Snowflake, Cloudflare, Adobe and Fortinet.
| Last FY | EV/Revenue | EV/EBITDA | ||||||
|---|---|---|---|---|---|---|---|---|
| Revenue | EBITDA | Last FY | LTM | 2027E | Last FY | LTM | 2027E | |
| $41B | $13B | 6.6x | 6.1x | 20.9x | 19.0x | |||
| $11B | $1B | 22.3x | 21.0x | 252.0x | 63.6x | |||
| $68B | $17B | 4.3x | 4.1x | 17.3x | 14.5x | |||
| $4.8B | ($12M) | 45.3x | 38.0x | (17454.4x) | 127.1x | |||
| $42B | $13B | 5.0x | 4.6x | 15.9x | 10.8x | |||
| $13B | $2.6B | 8.3x | 6.9x | 42.6x | 17.8x | |||
| $4.7B | ($1.3B) | 20.9x | 16.4x | (76.7x) | 93.1x | |||
| $2.2B | ($25M) | 44.2x | 33.7x | (3772.9x) | 140.3x | |||
This data is available for Pro users. Sign up to see all Mend.io competitors and their valuation data. Start Free Trial | ||||||||
Common questions about Mend.io
| When was Mend.io founded? | Mend.io was founded in 2011. |
| Where is Mend.io headquartered? | Mend.io is headquartered in Boston, MA, United States. |
| Is Mend.io publicly listed? | No, Mend.io is a private, VC-backed company. |
| How much funding has Mend.io raised? | Mend.io has raised $121M across 4 funding rounds. |
| What was Mend.io's last funding round? | Mend.io's last funding round was a $75M Series D in April 2021, led by Pitango VC. |
| Who are Mend.io's investors? | Mend.io's investors include M12, 83North, Susquehanna Growth Equity, Pitango VC, Poalim Equity, Oracle Investment Management and Peregrine Ventures. |
| Which companies are comparable to Mend.io? | Companies comparable to Mend.io include Safe Superintelligence, Socure, Dream Security, Forter, IBM and CrowdStrike. |
| How many companies has Mend.io acquired? | Mend.io has acquired 5 companies, including Atom Security, Xanitizer, DefenseCode, Diffend and Renovate. |
See companies similar to Mend.io
Start Your
Free Trial Today
Try Multiples for free for 3 days. Got questions or need a demo? Schedule a call with us below.




