sticky : sticky

Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

Sonatype recognized as a leader in SCA software in Forrester Wave

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

Blog Post

Exploit creator selling 250+ reserved npm packages on Telegram

Blog Post

'cors-parser' npm package hides cross-platform backdoor in PNG files

Filter by

Sonatype customers leading with innovation in the new year

Blog Post

2025 predictions: Artificial intelligence (AI)

Blog Post

CVE-2024-53677: A critical file upload vulnerability in Apache Struts2

Blog Post

npm packages from Rspack, Vant compromised, blocked by Sonatype

Blog Post

Counterfeit ESLint and Node 'types' libraries downloaded thousands of times abuse Pastebin

Blog Post

Why software composition analysis is essential for open source security

Blog Post

Demystifying VEX: Simplifying SBOMs with Sonatype SBOM Manager

Blog Post

Secure your software supply chain with the Sonatype and GitHub integration

Blog Post

Key takeaways from the latest DoD Enterprise DevSecOps Fundamentals update

Blog Post

Wrapping up a decade of insights from the State of the Software Supply Chain

Blog Post

Gain visibility and traceability of your software supply chain with SBOMs with new Gartner® report

Blog Post

From risks to resilience: Best practices for software supply chain security

Blog Post

Fake IP checker utilities on npm are crypto stealers

Blog Post

Sonatype recognized as a leader in SCA software in Forrester Wave

Blog Post

Gartner report: How SBOMs improve security and compliance in the software supply chain

1
2
3
...
14

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.