Skip to main content
TrustRadius
Sonatype Platform

Sonatype Platform

Overview

What is Sonatype Platform?

Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and…

Read more
Recent Reviews

Lives up to the hype

10 out of 10
December 05, 2023
We have been utilizing Repository Manager and Lifecyle for approximately five years now. The entire software development team interacts …
Continue reading
Read all reviews

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing

Sonatype Nexus Repository

$145

On Premise
per year per user

Sonatype Air-Gapped Environment Nexus Repository

$175

On Premise
per year per user

Sonatype Repository Firewall

$224

On Premise
per year per user

Entry-level set up fee?

  • Setup fee required
    Required
For the latest information on pricing, visithttps://www.sonatype.com/nexus/product…

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Starting price (does not include set up fee)

  • $165 Per user per month, billed annually per user
Return to navigation

Product Details

What is Sonatype Platform?

Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software. Core product offerings include:
  1. Sonatype Repository Firewall the first line of defense against against software supply chain attacks. It blocks malicious and suspicious packages, prevents known vulnerabilities and harmful open source releases from downloading into the repository, and automatically releases cleared components back into the development pipeline.
  2. Sonatype Lifecycle enables continuous monitoring of business critical applications that have been released or deployed to determine risk level and remediate vulnerabilities faster, with precise component intelligence. This helps to prevent unplanned work, security breaches, and maintainability issues with early detection and remediation.
  3. Sonatype Nexus Repository helps manage components, binaries and build artifacts across the entire software supply chain, serving billions of components to developers weekly so they can build more quickly and reliably.

Sonatype Platform Features

  • Supported: Continuous Monitoring
  • Supported: Policy Enforcement
  • Supported: Integrations and Language Support
  • Supported: Reporting & Analytics
  • Supported: Remediation
  • Supported: Flexible deployment options (Cloud, Self-hosted, Air-gapped)
  • Supported: Scalability
  • Supported: SBOM
  • Supported: Protection from unknown vulnerabilities
  • Supported: Hosted repository protection from namespace confusion attack
  • Supported: Suspicious auto-quarantine
  • Supported: Automated version replacement for dependencies
  • Supported: Support for artifactory enterprise

Sonatype Platform Screenshots

Screenshot of Sonatype LifecycleScreenshot of Sonatype Lifecycle - Chrome extensionScreenshot of Sonatype Advanced Legal PackScreenshot of Sonatype Nexus RepositoryScreenshot of Sonatype Nexus Repository ManagerScreenshot of Remediation of vulnerabilitiesScreenshot of Sonatype Lifecycle IntegrationsScreenshot of Sonatype Repository Firewall

Sonatype Platform Videos

"Run Anywhere" with Sonatype
Full Spectrum Software Supply Chain Automation

Sonatype Platform Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows, Linux, Mac
Mobile ApplicationNo
Supported CountriesNorth America, EMEA, APJ, Latin America
Supported LanguagesEnglish

Frequently Asked Questions

Sonatype Platform starts at $165.

Snyk, Veracode, and Black Duck Software Composition Analysis (SCA) are common alternatives for Sonatype Platform.

The most common users of Sonatype Platform are from Enterprises (1,001+ employees).

Sonatype Platform Customer Size Distribution

Consumers0%
Small Businesses (1-50 employees)0%
Mid-Size Companies (51-500 employees)10%
Enterprises (more than 500 employees)90%
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(18)

Attribute Ratings

Reviews

(1-1 of 1)
Companies can't remove reviews or game the system. Here's why
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Top tier platform for identifying, remediating and managing known source code vulnerabilities across a large portfolio of applications. We incorporated Nexus Lifecycle scanning into our end to end pipelines with great success.
  • Vulnerability identification and best path to remediation.
  • Very well supported platform - exceptional customer service.
  • Ongoing monitoring of last released BOM per application and alerting of new vulnerabilities.
  • Recommendations for best Energy Consumption options based on existing BOM - e.g. replace component X with component Y to reduce CPU cycles.
  • More specific recommendations regarding Open Source Licensing - not just saying "Copyleft" but the next level of analysis (it's difficult - but would save a lot of time)
  • Provide specific component replacement options where no "next version" resolves a high severity vulnerability.
Product suite fits nicely in a large enterprise environment with a lot of applications.
  • Vulnerability Identification / Remediation Guidance
  • Relatively simple ingest/onboarding process per application
  • Outstanding support
  • Enabled us to be more proactive on vulnerability remediation
  • Significant reduction in legacy technical debt
  • Being proactive with monthly touchpoints to keep our progress moving forward
  • Black Duck Software Composition Analysis (SCA)
Sonatype seemed like a more complete platform.
Monthly touchpoints with Sinisa has been very valuable.
I don't remember if we purchased this option or not.
Yes
Yes
Sonatype provides ongoing monthly support which has been valuable and timely.
Return to navigation