Sonatype Platform vs. VMware AppDefense (discontinued)

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Sonatype Platform
Score 8.6 out of 10
Enterprise companies (1,001+ employees)
Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software.
$0
for use of the Sonatype Nexus Repository Community Edition
VMware AppDefense (discontinued)
Score 4.0 out of 10
N/A
VMware AppDefense was a hypervisor-native workload protection platform for enterprise virtualization and security teams, used to deliver a secure virtual infrastructure and simplify micro-segmentation planning by providing application visibility, reputation scoring, and security. The product is discontinued, and no longer available.N/A
Pricing
Sonatype PlatformVMware AppDefense (discontinued)
Editions & Modules
Sonatype Air-Gapped Environment Nexus Repository
$175
per year per user
Sonatype Repository Firewall
$224
per year per user
Sonatype Repository Firewall for Artifactory
$224
per year per user
Sonatype Air-Gapped Environment Repository Firewall
$230
per year per user
Sonatype Repository Firewall Cloud
$265
per year per user
Sonatype Lifecycle
$690
per year per user
Sonatype Lifecycle Cloud
$810
per year per user
Sonatype Air-Gapped Environment Lifecycle
$825
per year per user
Sonatype Nexus Repository Pro
$960
per month (billed annually)
Sonatype Nexus Repository
$960
per month (billed annually)
Sonatype SBOM Manager
Contact Sales
No answers on this topic
Offerings
Pricing Offerings
Sonatype PlatformVMware AppDefense (discontinued)
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoYes
Entry-level Setup FeeRequiredOptional
Additional Details
More Pricing Information
Community Pulse
Sonatype PlatformVMware AppDefense (discontinued)
Best Alternatives
Sonatype PlatformVMware AppDefense (discontinued)
Small Businesses

No answers on this topic

GitLab
GitLab
Score 8.7 out of 10
Medium-sized Companies
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
Enterprises
Veracode
Veracode
Score 8.7 out of 10
Veracode
Veracode
Score 8.7 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Sonatype PlatformVMware AppDefense (discontinued)
Likelihood to Recommend
8.6
(14 ratings)
8.4
(7 ratings)
Likelihood to Renew
8.8
(2 ratings)
-
(0 ratings)
Usability
8.0
(2 ratings)
-
(0 ratings)
Availability
9.0
(1 ratings)
-
(0 ratings)
Performance
8.0
(1 ratings)
-
(0 ratings)
Support Rating
10.0
(2 ratings)
8.5
(7 ratings)
Online Training
8.0
(1 ratings)
-
(0 ratings)
Implementation Rating
8.0
(1 ratings)
-
(0 ratings)
Configurability
8.5
(2 ratings)
-
(0 ratings)
Contract Terms and Pricing Model
9.0
(1 ratings)
-
(0 ratings)
Ease of integration
9.0
(1 ratings)
-
(0 ratings)
Product Scalability
8.0
(1 ratings)
-
(0 ratings)
Professional Services
9.0
(1 ratings)
-
(0 ratings)
Vendor post-sale
10.0
(1 ratings)
-
(0 ratings)
Vendor pre-sale
10.0
(1 ratings)
-
(0 ratings)
User Testimonials
Sonatype PlatformVMware AppDefense (discontinued)
Likelihood to Recommend
Sonatype
- Guidance on remediation is very good - Vulnerability detection is very good - Support is very good - Ability to ask PMs/POs open questions at Office Hours every month is very good - Support for languages is lacking (TIOBE Index Top20) - Some features are un-neededly hidden and make the usage more complex then it needs to be
Read full review
Discontinued Products
Being a VMware product, AppDefense has the advantage of compatibility with all of the VMware product feature updates and patches ( ESXi, NSX, vCenter, etc.). Paired with Carbon Black, it's resource overhead is well-tuned compared to traditional antivirus products.
Read full review
Pros
Sonatype
  • Nexus firewall is a great feature enabled for all our proxy repositories which are used to download the third-party opensource packages.
  • Nexus IQ is integrated with build stage to analyze the component against evaluation policy. This helps to figure out the application security standards.
  • Nexus IQ is also having a feature to scan container images before it uploads to our private repository. This is great feature for container platforms.
Read full review
Discontinued Products
  • I think that the AppDefense approach is clever and sets it apart from other products. Having a baseline of normal behavior that I can see is something I haven't seen in another product before.
  • AppDefense doesn't overload my systems with performance draining agents.
  • AppDefense integrates with VMWare products I have or plan to purchase.
  • Access to AppDefense support has been better than any other VMWare products.
Read full review
Cons
Sonatype
  • Support on the end of life lifecycle of known open source components that are going end of life, or already went end of life
  • Support for emerging infrastructure as code frameworks
  • Support for native/ default retention, archiving and clean up policies for hosted repositories
Read full review
Discontinued Products
  • PowerShell functionality.
  • Sorting results in some areas are not applicable.
  • Email alerting through AppDefense Manager does not exist, but support has said it is a feature to come.
Read full review
Likelihood to Renew
Sonatype
Sonatype supports more than 200 dev(s). It proves with the repository to store the artifacts. Allows for governance of open source software used by the different teams. It is used by security teams to scan for vulnerabilities in software(s) and in the deployed containers. It helps ensure code quality.
Read full review
Discontinued Products
No answers on this topic
Usability
Sonatype
Overall experience is great with the Platform; however, I see some opportunity with upgrading the platform as it is missing with data of historical scans to allow reviewer to get view of trend how the application/product development team is considering fixing the issues.
Read full review
Discontinued Products
No answers on this topic
Reliability and Availability
Sonatype
Extremely good
Read full review
Discontinued Products
No answers on this topic
Performance
Sonatype
Sonatype products are great value as I said but a few areas like how products use underlying resources in order to make it further lightweight, is something I would like them to consider.
Read full review
Discontinued Products
No answers on this topic
Support Rating
Sonatype
Monthly touchpoints with Sinisa has been very valuable.
Read full review
Discontinued Products
The product is still quite new, and there seems to be a lack of technical information available for both the E.U. and support staff. That being said, the support staff that I have worked with have always been very knowledgeable and ensure that they see a ticket through to completion.
Read full review
Implementation Rating
Sonatype
easy to implement and performing the scans via automations as well
Read full review
Discontinued Products
No answers on this topic
Alternatives Considered
Sonatype
Out of other products we evaluated before choosing Sonatype, the later looked far more user friendly, easy to understand and work with. This was key for us, as the tool needs to be used by many engineers that don't have security as their main focus. Having a tool that is easy to understand and work with, makes the process of evaluating open source dependencies much easier and appealing for developers.
Read full review
Discontinued Products
We have several security applications, but none exactly like VMware AppDefense. That is one of the reasons I like it, as it seems to take a different angle on monitoring and protection. The other apps monitor different things, but one thing AppDefense seems to have over them is a streamlined interface and not a lot of false positives.
Read full review
Contract Terms and Pricing Model
Sonatype
Great value for money
Read full review
Discontinued Products
No answers on this topic
Scalability
Sonatype
Everything is very good except a little concern regarding large scale docker usage.
Read full review
Discontinued Products
No answers on this topic
Professional Services
Sonatype
Very good
Read full review
Discontinued Products
No answers on this topic
Return on Investment
Sonatype
  • Sonatype's centralized management of artifacts have made it very easy for developers to share code in an efficient manner.
  • Sonatype's low false positive rate has made it easier to convince developers to remediate vulnerabilities
  • Sonatype's archaic architecture has made it more expensive to manage than it could be.
Read full review
Discontinued Products
  • As with everything now, automation is key. AppDefense effectively monitors the activity on all our VMs, freeing administrators to work on more projects
  • Makes it much easier to diagnose issues when system are not running as intended
Read full review
ScreenShots

Sonatype Platform Screenshots

Screenshot of Sonatype LifecycleScreenshot of Sonatype Lifecycle - Chrome extensionScreenshot of Sonatype Advanced Legal PackScreenshot of Sonatype Nexus RepositoryScreenshot of Sonatype Nexus Repository ManagerScreenshot of Remediation of vulnerabilities