sticky : sticky

Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

Blog Post

Taming the Wild West of Shadow AI

Blog Post

Sonatype recognized as a leader in SCA software in Forrester Wave

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

All blog posts

Filter by

“Quoi...? feur” from meme to malware – PyPI package targets Windows with ‘NullRAT’ info-stealer

Blog Post

A closer look: Differentiating software vulnerabilities and malware

Man with computer monitor instead of a head with a skull and crossbones.

Blog Post

npm manifest confusion – What is it and do you really need to worry about it?

Woman holding a laptop computer while working on a touch screen.

Blog Post

How to measure the maturity of your software supply chain

Binary code and a yellow bug on a computer screen monitor sitting on a man's body where his head should be.

Blog Post

PyPI attackers still at it: Malicious packages drop trojans and info-stealers

Forrester Wave Leader 2023 Software Composition Analysis.

Blog Post

Sonatype named a leader in The Forrester Wave™ for software composition analysis

Illustration of computer print out emerging from a desktop computer with binary code on the screen.

Blog Post

Better software development: Insights from the SBOM Scorecard

A man's hand holding a small brass padlock.

Blog Post

How to improve your software supply chain with a software security framework

Six different hands each holding a piece of a white puzzle.

Blog Post

How software composition analysis can help you go from good to great

Blog Post

DevSecOps Leadership Forum: Revolutionizing financial services

Document titled Magic Quadrant for Application Security Testing.

Blog Post

Sonatype named in the 2023 Gartner® Magic Quadrant™ for Application Security Testing

Multi Colored lego bricks overflowing a plastic container.

Blog Post

Software packages, do we even need them?

Blog Post

Wicked Good Development Episode 32: Java queens at Devnexus 2023

Blog Post

Can the open source community save Europe from the Cyber Resilience Act?

Blog Post

7 software licenses explained: Open source and closed source

1
...
11
12
13
14

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.