Platform
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

Open Source Malware Index Q1 2025: Data exfil threats rising sharply

Blog Post

Using Sonatype Nexus Repository with the new Docker Hub rate limits

Blog Post

Multiple crypto packages hijacked, turned into info-stealers

Blog Post

Introducing Nexus Repository Community Edition: Enhanced features for growing teams

All blog posts

Filter by

DevSecOps: A beginner's guide

Blog Post

The history of Maven Central and Sonatype: A journey from past to present

Blog Post

Why DevOps recommends Shift Left testing

Blog Post

How the SEC charges against SolarWinds highlight the cybersecurity liability of software companies

Blog Post

Software dependencies: A beginner's guide

Blog Post

Dependency mapping: A beginner's guide

Blog Post

Open source risk management: Safeguarding software integrity

Blog Post

How manufacturing best practices can improve open source consumption and software supply chains

Blog Post

Top 10 open source projects hit by HTTP/2 'Rapid Reset' zero-day

Blog Post

Introducing our 9th annual State of the Software Supply Chain report

Blog Post

SAST vs. DAST: Application security testing tools

Blog Post

npm packages caught exfiltrating Kubernetes config, SSH keys

Blog Post

New npm PoC packages target PayPal Zettle, Airbnb developers

Blog Post

Unlocking the power of generative AI in software development

Blog Post

How to navigate DevOps principles: Analyzing Shift Left and Secure Right

1
...
11
12
13
14

Platform
- Overview
- Repository
- Pricing
- Firewall
- SBOM Manager
- Lifecycle
- Integrations
- AI/ML
- Other Products
  - Container
  - Advanced Legal Pack

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.