TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Sonatype Platform

    Score8.8 out of 10
    Enterprise companies (1,001+ employees)
    Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software.

    $0

    for use of the Sonatype Nexus Repository Community Edition

    Tenable Vulnerability Management

    Score8.9 out of 10
    N/AVulnerability management specialist Tenable offers their cloud application and container security platform Tenable Web App Scanning (formerly Tenable.io), a vulnerability management tool that emphasizes visibility of web applications, automatic scanning, and a unified view of cloud infrastructure and possible inconsistencies indicating a vulnerability.N/A
    Pricing
    Sonatype PlatformTenable Vulnerability Management
    Editions & Modules
    Sonatype Air-Gapped Environment Nexus Repository
    $175
    per year per user
    Sonatype Repository Firewall
    $224
    per year per user
    Sonatype Repository Firewall for Artifactory
    $224
    per year per user
    Sonatype Air-Gapped Environment Repository Firewall
    $230
    per year per user
    Sonatype Repository Firewall Cloud
    $265
    per year per user
    Sonatype Lifecycle
    $690
    per year per user
    Sonatype Lifecycle Cloud
    $810
    per year per user
    Sonatype Air-Gapped Environment Lifecycle
    $825
    per year per user
    Sonatype Nexus Repository Pro
    $960
    per month (billed annually)
    Sonatype Nexus Repository
    $960
    per month (billed annually)
    Sonatype SBOM Manager
    Contact Sales
    No answers on this topic
    Offerings
    Pricing Offerings
    Sonatype PlatformTenable Vulnerability Management
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeRequiredNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Sonatype PlatformTenable Vulnerability Management
    Considered Both Products
    Sonatype
    No answer on this topic
    Tenable
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    14 Answers
    100%
    Would buy again
    5 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    14 Answers
    100%
    Delivers good value for the price
    5 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    14 Answers
    100%
    Happy with the feature set
    5 Answers
    Lived up to sales and marketing promises
    90%
    Lived up to sales and marketing promises
    9 Answers
    No answers on this topic
    Implementation went as expected
    100%
    Implementation went as expected
    12 Answers
    No answers on this topic
    Features
    Sonatype PlatformTenable Vulnerability Management
    Threat Intelligence
    Comparison of Threat Intelligence features of Sonatype Platform and Tenable Vulnerability Management
    Feature
    Sonatype Platform
    -
    Ratings
    Tenable Vulnerability Management
    8.4
    2 Ratings
    4% above category average
    Network Analytics00 Ratings10.02 Ratings
    Threat Recognition00 Ratings10.02 Ratings
    Vulnerability Classification00 Ratings10.02 Ratings
    Automated Alerts and Reporting00 Ratings4.02 Ratings
    Threat Analysis00 Ratings10.02 Ratings
    Threat Intelligence Reporting00 Ratings5.02 Ratings
    Automated Threat Identification00 Ratings10.02 Ratings
    Vulnerability Management Tools
    Comparison of Vulnerability Management Tools features of Sonatype Platform and Tenable Vulnerability Management
    Feature
    Sonatype Platform
    -
    Ratings
    Tenable Vulnerability Management
    8.8
    2 Ratings
    6% above category average
    IT Asset Realization00 Ratings8.02 Ratings
    Authentication00 Ratings10.02 Ratings
    Configuration Monitoring00 Ratings8.02 Ratings
    Web Scanning00 Ratings8.02 Ratings
    Vulnerability Intelligence00 Ratings10.02 Ratings
    Best Alternatives
    Sonatype PlatformTenable Vulnerability Management
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    Tenable Nessus
    Score8.8 out of 10
    Enterprises
    No answers on this topic
    Tenable Nessus
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Sonatype PlatformTenable Vulnerability Management
    Likelihood to Recommend
    8.8
    (14 ratings)
    10.0
    (7 ratings)
    Likelihood to Renew
    8.9
    (2 ratings)
    9.0
    (1 ratings)
    Usability
    8.0
    (2 ratings)
    8.0
    (1 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    8.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    10.0
    (2 ratings)
    8.8
    (2 ratings)
    Online Training
    8.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.0
    (1 ratings)
    -
    (0 ratings)
    Configurability
    8.4
    (2 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.0
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    9.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    8.0
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    9.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Sonatype PlatformTenable Vulnerability Management
    Likelihood to Recommend
    Sonatype
    - Guidance on remediation is very good - Vulnerability detection is very good - Support is very good - Ability to ask PMs/POs open questions at Office Hours every month is very good - Support for languages is lacking (TIOBE Index Top20) - Some features are un-neededly hidden and make the usage more complex then it needs to be
    Read full review
    Tenable
    I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.
    Incentivized
    Read full review
    Pros
    Sonatype
    • Nexus firewall is a great feature enabled for all our proxy repositories which are used to download the third-party opensource packages.
    • Nexus IQ is integrated with build stage to analyze the component against evaluation policy. This helps to figure out the application security standards.
    • Nexus IQ is also having a feature to scan container images before it uploads to our private repository. This is great feature for container platforms.
    Read full review
    Tenable
    • Setup of the internal scanner was fairly simple and straight forward.
    • An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
    • Has automated reporting to keep executives and compliance departments informed.
    • Internal scanner can be configured to auto-update itself.
    • "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
    • External PCI scans allow you to remediate before submitting to Tenable.io for review.
    • Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
    • Internal and External scans can be automated. schedule for the automated scans is very granular.
    Incentivized
    Read full review
    Cons
    Sonatype
    • Support on the end of life lifecycle of known open source components that are going end of life, or already went end of life
    • Support for emerging infrastructure as code frameworks
    • Support for native/ default retention, archiving and clean up policies for hosted repositories
    Read full review
    Tenable
    • Expensive - You do pay a slight premium for the best product in the space.
    • Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.
    Incentivized
    Read full review
    Likelihood to Renew
    Sonatype
    Sonatype supports more than 200 dev(s). It proves with the repository to store the artifacts. Allows for governance of open source software used by the different teams. It is used by security teams to scan for vulnerabilities in software(s) and in the deployed containers. It helps ensure code quality.
    Incentivized
    Read full review
    Tenable
    We like to renew tenable each year we have had it so far.
    Incentivized
    Read full review
    Usability
    Sonatype
    Overall experience is great with the Platform; however, I see some opportunity with upgrading the platform as it is missing with data of historical scans to allow reviewer to get view of trend how the application/product development team is considering fixing the issues.
    Incentivized
    Read full review
    Tenable
    Overall it is good, it took a little while to understand it and figure things out but once you have a good grasp on it then, it is very good.
    Incentivized
    Read full review
    Reliability and Availability
    Sonatype
    Extremely good
    Read full review
    Tenable
    No answers on this topic
    Performance
    Sonatype
    Sonatype products are great value as I said but a few areas like how products use underlying resources in order to make it further lightweight, is something I would like them to consider.
    Read full review
    Tenable
    No answers on this topic
    Support Rating
    Sonatype
    Monthly touchpoints with Sinisa has been very valuable.
    Incentivized
    Read full review
    Tenable
    Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)
    Incentivized
    Read full review
    Implementation Rating
    Sonatype
    easy to implement and performing the scans via automations as well
    Incentivized
    Read full review
    Tenable
    No answers on this topic
    Alternatives Considered
    Sonatype
    Out of other products we evaluated before choosing Sonatype, the later looked far more user friendly, easy to understand and work with. This was key for us, as the tool needs to be used by many engineers that don't have security as their main focus. Having a tool that is easy to understand and work with, makes the process of evaluating open source dependencies much easier and appealing for developers.
    Incentivized
    Read full review
    Tenable
    Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Sonatype
    Great value for money
    Read full review
    Tenable
    No answers on this topic
    Scalability
    Sonatype
    Everything is very good except a little concern regarding large scale docker usage.
    Read full review
    Tenable
    No answers on this topic
    Professional Services
    Sonatype
    Very good
    Read full review
    Tenable
    No answers on this topic
    Return on Investment
    Sonatype
    • Sonatype's centralized management of artifacts have made it very easy for developers to share code in an efficient manner.
    • Sonatype's low false positive rate has made it easier to convince developers to remediate vulnerabilities
    • Sonatype's archaic architecture has made it more expensive to manage than it could be.
    Read full review
    Tenable
    • Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.
    Incentivized
    Read full review
    ScreenShots

    Sonatype Platform Screenshots

    Screenshot of Sonatype LifecycleScreenshot of Sonatype Lifecycle - Chrome extensionScreenshot of Sonatype Advanced Legal PackScreenshot of Sonatype Nexus RepositoryScreenshot of Sonatype Nexus Repository ManagerScreenshot of Remediation of vulnerabilities