Sonatype Platform used at Enterprise scale make developers life easy

With over 3.000 business applications, 100 million lines of code, 500 development teams and roughly 1.500 builds per day, standardization, governance and control are key aspects we address with the Sonatype Platform.

Nexus Repository is used as the golden source for artifact management and acts as the crown jewel of the software development factory. All builds and off-the-shelf packages are pulled from Nexus prior to deployments downstream.

Any dependency that is consumed is first checked using Sonatype Firewall and subsequently scanned using Sonatype Lifecycle in the pipelines. Custom and default policies work together in securing our organization against attack vectors like malware, malicious components, security vulnerabilities, license violations and end of life dependencies.

Authorization to application information is centrally governed, access management too. Many integrations between pipelines running on Azure or on premise are centrally governed. Security reviews by expert teams is arranged through integration between Nexus Lifecycle and ServiceNow.

Risk Acceptance and other policy deviations are centrally managed and are used as vital information to assess the overall security posture of our organization.

Support for new technologies and assistance with remediation of new vulnerabilities that are found in components is received at a decent frequency by Sonatype.