https://cybertoolchain.io/tools/mend-platform New releases and features in Mend Platform, tracked by The Cyber Toolchain. en Sun, 01 Nov 2026 00:00:00 GMT https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.10.1-%2801-November-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.10.1-%2801-November-2026%29 Sun, 01 Nov 2026 00:00:00 GMT Mend Platform adds an AI natural-language assistant and granular SAST scan-category control in the Scan Profile⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Control low-probability SAST scan categories individually in the Scan Profile — include or exclude specific categories such as 'File Read' or 'Database Read' — replacing the previous binary toggle with a configurable selection tree that applies to the next scan and shows a count of selected categories.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Mend Platform adds Mend Intelligent Agent, an AI assistant that accepts natural-language queries to explore platform capabilities, navigate to relevant views, and produce executive-level risk summaries across all applications and projects; enabled by default for organizations with a signed AI consent addendum. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes https://docs.mend.io/platform/latest/mend-platform-release-notes Sun, 25 Oct 2026 07:51:46 GMT Mend Platform 26.9.3 adds aggregated SBOM exports in CycloneDX/SPDX and makes Custom Roles generally available.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new organizational setting, 'Include Proprietary Libraries in Workflows,' to exclude proprietary (in-house) components from automation workflows that check for 'Empty License' conditions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces aggregated SBOM export for application and multi-project scopes, consolidating multiple project-level files into one deduplicated document; supports CycloneDX and SPDX standards. Projects in multi-project scope must belong to the same application; per-project generation remains the default. • Promotes Custom Roles from closed beta to general availability, with an enhanced role breakdown and Create Role wizard for custom role management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.9.3-%2818-October-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.9.3-%2818-October-2026%29 Sun, 18 Oct 2026 00:00:00 GMT Mend Platform 26.9.3 adds GA Custom Roles and aggregated multi-project SBOM export in CycloneDX and SPDX formats.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds aggregated SBOM export for application and multi-project scopes, consolidating and deduplicating components across projects into a single CycloneDX or SPDX document.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Promotes Custom Roles from closed beta to general availability, with an enhanced role breakdown view and Create Role wizard for intuitive role management. • Introduces an organizational setting, `Include Proprietary Libraries in Workflows`, to exclude in-house components from 'Empty License' automation workflow evaluations by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes https://docs.mend.io/platform/latest/mend-platform-release-notes Sat, 10 Oct 2026 08:03:45 GMT Mend Platform adds zero-day alerts, a centralized Activity Log, account-level workflows, Invicti Platform DAST integration, and IDE-based suppression via Agentic Integrations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds dedicated zero-day alerts for immediate awareness when your organization is vulnerable to emerging threats, toggleable per organization via `My Profile → Email Notifications`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enhances Automation Workflows email notifications to allow workflow creators to select specific users or groups as recipients for scan summary emails. • Introduces a suppression tool in Agentic Integrations enabling single and bulk suppression or unsuppression of findings across SAST and SCA engines directly within IDE or AI agent workflows, with UI updates reflected within seconds. • Introduces unified vulnerability remediation across the Mend Platform, adding a `Top Fix` column in the Findings table and standardizing fix logic and recommendations in the Remediation tab. • Introduces Account-Level (Global) Workflows, allowing administrators to define workflows centrally and propagate them to selected organizations, with full API support for managing global workflows. • Adds a centralized Activity Log for administrators covering platform activities, configuration changes, and security and legal findings actions across all engines (Platform, Dependencies, Code, Containers, AI) with 18 months of retention, filterable by date, event, category, engine, user, application, or project. • Adds Activity Log export as an Excel report from the Reports area or directly from the Activity Log page, plus programmatic retrieval via API. • Adds account-scoped Activity Log coverage for custom roles, global workflows, account-level reports, and SAML integrations, visible only to Account Admins. • Adds Mend DAST integration with the new Invicti Platform via a dedicated integration card, supporting ingestion of assets, vulnerabilities, and scans with CVSS v4 scoring and structured vulnerability classifications. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.9.2-%2804-October-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.9.2-%2804-October-2026%29 Sun, 04 Oct 2026 00:00:00 GMT Mend Platform 26.9.2 adds a 'Send Email' Automation Workflow action and dedicated zero-day vulnerability alerts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends Automation Workflow email controls to let workflow creators select specific users or groups as recipients for scan summary emails.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds dedicated zero-day alerts to provide immediate awareness when your organization is exposed to emerging threats. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.8.2-%2806-September-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.8.2-%2806-September-2026%29 Sun, 06 Sep 2026 00:00:00 GMT Mend 26.8.2 adds in-IDE suppression for SAST and SCA findings and unifies vulnerability remediation with a new Top Fix column. • Adds a suppression tool in Agentic Integrations supporting single and bulk suppression or unsuppression actions across all scanning engines, including SAST and SCA, with UI updates reflecting within seconds — reducing context-switching for developers working in their IDE or AI agent workflow. • Introduces a unified vulnerability remediation experience with a new `Top Fix` column in the Findings table, an updated Remediation tab, and standardized fix logic and metadata across the Mend Platform. Breaking changes: • The unified vulnerability remediation fix logic may produce fewer remediation suggestions per vulnerability; existing workflows that relied on the previous volume of suggestions should be reviewed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.8.1-%2823-August-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.8.1-%2823-August-2026%29 Sun, 23 Aug 2026 00:00:00 GMT Mend 26.8.1 adds account-level global workflows with API support and a redesigned Administration sidebar with AI settings. • Introduces Account-Level (Global) Workflows, letting administrators define workflows centrally and propagate them to selected organizations, with controls over whether org-level admins can enable or disable them locally. • Adds comprehensive API support for managing global workflows. • Updates the Administration page sidebar with a categorized, collapsible navigation structure aligning with Application and Project pages. • Moves AI Usage settings from the General tab to a dedicated 'AI Usage' tab under a new 'AI' category in the Administration page. • Adds specific sub-headers for 'AI', 'Code', and 'Dependencies' within the Engine Settings section of the Administration page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.5.2-%2814-June-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.5.2-%2814-June-2026%29 Sun, 14 Jun 2026 00:00:00 GMT Org-level Dependencies Risk report via UI; new scalable reporting pipeline for Dependencies Findings Report • Adds `Dependencies Risk` organization-level report available in the Mend Platform UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.5.1-%2831-May-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.5.1-%2831-May-2026%29 Sun, 31 May 2026 00:00:00 GMT Mend Platform v26.5.1 adds MCP server exposure for security findings and new Admin group assignment setting • Adds `MCP server` exposing SAST and SCA security findings with remediation suggestions to AI-powered tools via the Model Context Protocol. • Adds a new Administration setting to control whether newly created applications are automatically assigned to the Admin group. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.3-%2817-May-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.3-%2817-May-2026%29 Sun, 17 May 2026 00:00:00 GMT Mend Platform v26.4.3 adds custom roles with granular permissions and UI clarity for copyright origins. • Introduces custom roles with granular permissions to define least-privilege access via groups at organization and application levels • Adds an "Assigned by" field to copyright entries in the OS library side panel to distinguish system-detected from user-overridden copyrights • Replaces the floating filter row in Admin > Applications with platform-standard filter buttons for consistent filtering Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.2-%2803-May-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.2-%2803-May-2026%29 Sun, 03 May 2026 00:00:00 GMT Mend for VS Code extends to Open-VSX/AI IDEs; bulk actions toolbar adds to admin UI. • `Mend for Visual Studio Code` extension becomes available on the Open-VSX registry, enabling installation in AI-native IDEs like Cursor and Windsurf • Updated administration screens include a floating bulk actions toolbar Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.1-%2819-April-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.4.1-%2819-April-2026%29 Sun, 19 Apr 2026 00:00:00 GMT Adds Users & Groups report generation via UI/API, CPE-based SBOM import fallback, Application Admin source file remapping, and UI revamps for Findings and Reports. • Adds the Users & Groups report to allow admins to generate comprehensive reports of users, roles, and group memberships via the UI or API, supporting multiple formats. • Adds support for recognizing CPE identifiers during SBOM imports in SPDX and CycloneDX formats when PURL is missing, using CPEs to identify components for broader compatibility. • Enables Application Admins to remap source files within their assigned applications via updated UI and API with restricted application-level scope. • Revamps the organizational Findings table UI with streamlined columns, improved filtering/sorting, enhanced search, clearer terminology, and modern UX patterns. • Enhances the Report Page UI with refreshed scan engine icons, optimized column layouts, ellipsis overflow for text cells, unified status chip designs, and hidden 'Generated By' cell by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.2.2-%2808-March-2026%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-26.2.2-%2808-March-2026%29 Sun, 08 Mar 2026 00:00:00 GMT Mend Platform v26.2.2 adds EPSS column, Auditor role, AI scan filter, and dependencyContexts API field. • Adds `dependencyContexts` field to the Get Project Security Findings API endpoint • Adds a new pre-defined "Auditor" role for read-only access • Adds support for filtering scans, reports, findings, and violations by AI scan engine • Adds EPSS Score column to the Dependencies → Findings table Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.12.1-%2828-December-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.12.1-%2828-December-2025%29 Sun, 28 Dec 2025 00:00:00 GMT Mend Platform 25.12.1 adds AI-powered natural language search and enhanced SAML integration controls • Adds a natural language search bar powered by AI to filter applications and projects with intuitive prompts. • Enhances SAML integration with new configuration options, improved user provisioning controls, and a modernized UI for a more flexible and secure authentication experience. • Enables disabling local logins within the SAML configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#%2827-October-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#%2827-October-2025%29 Mon, 27 Oct 2025 00:00:00 GMT Automation Workflows are now triggered for every scan by default. • Automation Workflows are now triggered for every scan by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.8.1-%2824-August-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.8.1-%2824-August-2025%29 Sun, 24 Aug 2025 00:00:00 GMT Mend Platform v25.8.1 adds SAML SSO-only enforcement, Jira label mapping config, and CSV findings export. • Adds a configuration option in the SAML integration settings to enforce SSO-only login by disabling username/password authentication • Enhances the Jira integration by mapping Mend attributes to Jira fields for adding labels with Mend attributes or free text • Introduces the ability to export findings to CSV Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2.2-%2823-July-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2.2-%2823-July-2025%29 Wed, 23 Jul 2025 00:00:00 GMT Introduces 'Notification User' account type to configure email notifications for distribution lists. • Adds `Notification User` as a new user type available in Mend Platform to handle email notification distribution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2.1-%2815-July-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2.1-%2815-July-2025%29 Tue, 15 Jul 2025 00:00:00 GMT New granular control for Scan Summary email notifications via My Profile and bulk org settings • Adds ability to disable 'Scan Summary Email' notifications in the new Email Notifications configuration page under My Profile • Enables enabling or disabling 'Scan Summary Email' notifications per organization or in bulk across all organizations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2-%2813-July-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.6.2-%2813-July-2025%29 Sun, 13 Jul 2025 00:00:00 GMT Mend Platform v25.6.2 adds support for Jira Data Center versions 10.0.0 through 10.7.2. • Adds support for Jira Data Center versions 10.0.0 - 10.7.2. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.5.1-%2808-June-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.5.1-%2808-June-2025%29 Sun, 08 Jun 2025 00:00:00 GMT Version 25.5.1 introduces application-level workflow management and visibility into organization-level workflows within the Violations view. • Application admins can now create workflows tailored to specific applications • Existing application workflows can be edited to adapt to evolving requirements • Organization-admin set workflows are now visible to application admins • Violations from both application-level and organization-level workflows appear in the Violations view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#03-March-2025 https://docs.mend.io/platform/latest/mend-platform-release-notes#03-March-2025 Mon, 03 Mar 2025 00:00:00 GMT Mend Platform introduces Mend AI for AI inventory visibility and Mend AI Premium for behavioral risk detection. • Introducing Mend AI to detect AI components (models, frameworks, inference providers) and identify "Shadow AI". • Adding Mend AI Premium for AI Component Risk Insights including licensing and vulnerability risks. • Adding AI Behavioral Risks (Red-teaming) capability with prebuilt customizable tests for prompt injection, context leakage, and data exfiltration. • Enabling Proactive Policies and Governance for AI components through policy engine automation workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.1.2-%2809-February-2025%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-25.1.2-%2809-February-2025%29 Sun, 09 Feb 2025 00:00:00 GMT Adds report filtering by up to 10 labels to scope data to specific teams. • Adds support for filtering reports by Labels, enabling users to select up to 10 labels to narrow down report data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.10.3-%2817-November-2024%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.10.3-%2817-November-2024%29 Sun, 17 Nov 2024 00:00:00 GMT Mend Platform 24.10.3 adds Jira Data Center integration and Violations API • Adds Jira Data Center integration for issue creation and tracking • Adds API to access violation data for security and compliance monitoring • Introduces Risk Factors feature grouping Reachability, Exploitability and Maliciousness statuses with a filterable column Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.5.1-%2819-May-2024%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.5.1-%2819-May-2024%29 Sun, 19 May 2024 00:00:00 GMT Mend Platform 24.5.1 adds license selection and label-based scope conditions to automation workflows • Adds a predefined list of licenses selectable in the Licenses section of automation workflows • Adds label-based scope conditions to automation workflows, defaulting to organization-level Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.5.1-%2819-May-2024%29 https://docs.mend.io/platform/latest/mend-platform-release-notes#Version-24.5.1-%2819-May-2024%29 Sun, 19 May 2024 00:00:00 GMT Adds conditions and license-based scoping to Mend Platform automation workflows. • Adds predefined list of licenses to select from in the Licenses section of automation workflows • Adds label-based scope conditions to automation workflows to define trigger scope (default: organization-level) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/mend-platform