Mendr App installs statistics

Mendr turns vulnerable-dependency alerts into pull requests you can merge. Each fix is built and tested in a single-use sandbox and checked by a separate AI reviewer before it opens. Your CI decides, and you merge.

Starts where version bumps stop

Most tools open a version bump and leave you to fix what it breaks. Mendr builds and tests the upgrade first, and changes your code when it needs to. Fix one finding or select many: one pull request covers up to 10 packages in a repository.

Evidence in every pull request

Each fix runs in a single-use sandbox with an allowlisted network, and a separate AI reviewer checks the diff and the results. The pull request says what changed, what ran, and what is still open.

Your CI has the final say

Pull requests open as drafts by default. Mendr never merges, and your branch protections apply. After you merge, Mendr scans again to confirm the advisories are gone.

Pay for fixes, not seats

Only fixes that pass your CI count toward your plan, and every plan has unlimited people. Free covers 5 repositories, and Mendr covers the AI cost of your first 5 fixes. Pro Beta is $49 a month for 50 repositories.