Sonatype Enhances Platform
May 01, 2023

Sonatype unveiled new product capabilities and refined product names as part of a strengthened platform.

These enhancements are designed to give organizations greater customization capabilities, clearer security context, and more organizational control, empowering developer teams and their organizations to deliver innovative software safer, faster, and at scale.

New product features have been added to bolster Sonatype’s industry-leading software supply chain management platform. Enhancements include:

- Boosted Security Policy Management: Prioritize and maximize remediation efforts with intelligent policy creation and management in Sonatype Lifecycle, ensuring that the most impactful security vulnerabilities are tackled first.

- Deeper Insights and Benchmarking: Efficiently make decisions with proprietary, data-driven insights using Sonatype Lifecycle enhancements like Migration Scorecards, Nudges and Anomalies, and Stack Divergence.

- Easier Management at Enterprise Scale: Onboard applications, inherit policy and manage open source across a multi-level management hierarchy easily and at scale in Sonatype Lifecycle, and improve build times with a multi-install repository landscape using Sonatype Nexus Repository Pro.

- Enhanced User Experience: Accelerate component selection and automated policy enforcement with streamlined usability in Sonatype Repository Firewall.

- Platform High Availability (HA): Manage mission critical software with increased scalability through Sonatype Lifecycle and Sonatype Nexus Repository Pro.

- Containers for Air-Gapped Environments: Adopt containers in air-gapped networks more easily with the addition of Dockerfiles for disconnected environments.

The Nexus Platform has evolved into the Sonatype Platform to better reflect the unique capabilities of the entire solution. Nexus Repository remains with its steadfast brand reputation among its millions of users.

“Recent cybersecurity regulatory efforts, issuance of new rules and software liability guidance from governments and agencies around the world prove just how critical software supply chain management is. Organizations cannot innovate without full visibility into their software supply chains,” said Mitchell Johnson, Chief Product Development Officer at Sonatype. “By offering deeper intelligence and enhanced functionality, we’re empowering developers and engineering teams to find and fix risk earlier and innovate faster with safer open source. We’re proud to offer a state-of-the-art platform that is proactively evolving to address the needs of our customers, and are thrilled for what’s ahead.”

Along with these bolstered features, the Sonatype Platform also has a new visual identity. Refreshed platform and product logos subtly capture the core capabilities of Sonatype’s platform and its role in protecting the software supply chain, while reflecting Sonatype’s mission of connectedness and empowerment.

“The demand for software supply chain management tools continues to skyrocket as cybersecurity threats grow in number and sophistication,” said Alex Berry, President at Sonatype. “This evolved platform illustrates our continued growth and commitment to helping organizations accelerate innovation without sacrificing security.”

Share this

Industry News

May 02, 2024

Parasoft announces the opening of its new office in Northeast Ohio.

May 02, 2024

Postman released v11, a significant update that speeds up development by reducing collaboration friction on APIs.

May 02, 2024

Sysdig announced the launch of the company’s Runtime Insights Partner Ecosystem, recognizing the leading security solutions that combine with Sysdig to help customers prioritize and respond to critical security risks.

May 02, 2024

Nokod Security announced the general availability of the Nokod Security Platform.

May 02, 2024

Drata has acquired oak9, a cloud native security platform, and released a new capability in beta to seamlessly bring continuous compliance into the software development lifecycle.

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.