Mend SCA

About

Mend Container scans your container images and registries at scale. It uncovers vulnerabilities, license risks, and even exposed secrets before deployment.

Mend Container includes:

- Reachability analysis that works without installing runtime agents to identify which vulnerable files and methods are being called at runtime, allowing you to safely deprioritize more vulnerabilities that are not reachable than if you were using reachability in Mend SCA alone.
- Comprehensive container security starting with scanning a static image in your pipeline using Mend SCA and moving all the way to analyzing your container’s behavior for security risks in runtime with Mend Container.
- Secrets detection that identifies in an image any credentials, passwords, keys, and certificates being exposed or handled inappropriately.
- Scanning of all your running container images within your Kubernetes clusters, letting you easily find and label containers that are actually in use and deployed.