Sonatype Enhances Platform
May 01, 2023

Sonatype unveiled new product capabilities and refined product names as part of a strengthened platform.

These enhancements are designed to give organizations greater customization capabilities, clearer security context, and more organizational control, empowering developer teams and their organizations to deliver innovative software safer, faster, and at scale.

New product features have been added to bolster Sonatype’s industry-leading software supply chain management platform. Enhancements include:

- Boosted Security Policy Management: Prioritize and maximize remediation efforts with intelligent policy creation and management in Sonatype Lifecycle, ensuring that the most impactful security vulnerabilities are tackled first.

- Deeper Insights and Benchmarking: Efficiently make decisions with proprietary, data-driven insights using Sonatype Lifecycle enhancements like Migration Scorecards, Nudges and Anomalies, and Stack Divergence.

- Easier Management at Enterprise Scale: Onboard applications, inherit policy and manage open source across a multi-level management hierarchy easily and at scale in Sonatype Lifecycle, and improve build times with a multi-install repository landscape using Sonatype Nexus Repository Pro.

- Enhanced User Experience: Accelerate component selection and automated policy enforcement with streamlined usability in Sonatype Repository Firewall.

- Platform High Availability (HA): Manage mission critical software with increased scalability through Sonatype Lifecycle and Sonatype Nexus Repository Pro.

- Containers for Air-Gapped Environments: Adopt containers in air-gapped networks more easily with the addition of Dockerfiles for disconnected environments.

The Nexus Platform has evolved into the Sonatype Platform to better reflect the unique capabilities of the entire solution. Nexus Repository remains with its steadfast brand reputation among its millions of users.

“Recent cybersecurity regulatory efforts, issuance of new rules and software liability guidance from governments and agencies around the world prove just how critical software supply chain management is. Organizations cannot innovate without full visibility into their software supply chains,” said Mitchell Johnson, Chief Product Development Officer at Sonatype. “By offering deeper intelligence and enhanced functionality, we’re empowering developers and engineering teams to find and fix risk earlier and innovate faster with safer open source. We’re proud to offer a state-of-the-art platform that is proactively evolving to address the needs of our customers, and are thrilled for what’s ahead.”

Along with these bolstered features, the Sonatype Platform also has a new visual identity. Refreshed platform and product logos subtly capture the core capabilities of Sonatype’s platform and its role in protecting the software supply chain, while reflecting Sonatype’s mission of connectedness and empowerment.

“The demand for software supply chain management tools continues to skyrocket as cybersecurity threats grow in number and sophistication,” said Alex Berry, President at Sonatype. “This evolved platform illustrates our continued growth and commitment to helping organizations accelerate innovation without sacrificing security.”

Share this

Industry News

April 14, 2025

LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.

April 14, 2025

Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.

April 14, 2025

Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.

April 10, 2025

Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.

April 10, 2025

Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.

April 10, 2025

The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.

April 09, 2025

Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.

April 09, 2025

SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.

April 09, 2025

Akamai Technologies introduced App & API Protector Hybrid.

April 09, 2025

Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.

April 09, 2025

Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).

April 08, 2025

Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.

April 08, 2025

GitHub announced the general availability of security campaigns with Copilot Autofix to help security and developer teams rapidly reduce security debt across their entire codebase.

April 08, 2025

DX and Spotify announced a partnership to help engineering organizations achieve higher returns on investment and business impact from their Spotify Portal for Backstage implementation.

April 07, 2025

Appfire announced its launch of the Appfire Cloud Advantage Alliance.