sticky : sticky

Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

Blog Post

Taming the Wild West of Shadow AI

Blog Post

Sonatype recognized as a leader in SCA software in Forrester Wave

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

Filter by

Proactive compliance with Sonatype: Automating reporting for U.S. Army SBOM requirements

Blog Post

Fake VS Code extension on npm uses altered ScreenConnect utility as spyware

Blog Post

Assessing your open source software security efficacy

Blog Post

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

Blog Post

Core AI technology and the foundation of future innovations: Get Gartner® report

Blog Post

Taming the Wild West of Shadow AI

Blog Post

2025 predictions: Security industry

Blog Post

Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition

Blog Post

Central Publisher Portal now validates Sigstore signatures

Blog Post

Protecting the software supply chain: Insights from our expert panel

Blog Post

Unlock collaboration and efficiency in software management with SBOMs

Blog Post

Fake Solana packages target crypto devs, abuse Slack & ImgBB for data theft

Blog Post

Sonatype customers leading with innovation in the new year

1
2
3
...
14

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.

Sonatype Blog

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

Taming the Wild West of Shadow AI

Sonatype recognized as a leader in SCA software in Forrester Wave

10 years of software supply chains: Navigating the growth, risks, and future of open source

Proactive compliance with Sonatype: Automating reporting for U.S. Army SBOM requirements

2025 predictions: Threats

Fake VS Code extension on npm uses altered ScreenConnect utility as spyware

Assessing your open source software security efficacy

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

Core AI technology and the foundation of future innovations: Get Gartner® report

Taming the Wild West of Shadow AI

2025 predictions: Security industry

Preparing for PCI DSS 4.0: How Sonatype SBOM Manager can streamline and accelerate your transition

Central Publisher Portal now validates Sigstore signatures

Protecting the software supply chain: Insights from our expert panel

2025 predictions: Regulations

Unlock collaboration and efficiency in software management with SBOMs

Fake Solana packages target crypto devs, abuse Slack & ImgBB for data theft

Sonatype customers leading with innovation in the new year

Subscribe for all the latest software security news and events