Press Releases

The latest scoop on Sonatype.

Total Economic Impact Study on Sonatype’s Nexus Platform Reveals 232% ROI and 20% Reduction in Risk of Breach

New independent study finds Sonatype’s products save $14,000 per developer per year when improving secure coding practices

FULTON, MD – Jan 29, 2019 - Sonatype, the leader in automated open source governance, announced the release of The Total Economic Impact™ Of The Sonatype Nexus Platform, a commissioned study conducted by research firm Forrester Consulting. In the study, Forrester found that organizations using the Nexus Platform received an average of 232% return on their investment over three years and saw a net benefit achieved in under 12 months due to increased developer productivity, decreased risk of breaches and time-saved by security and compliance staff.

Sonatype Recognized as Leading Provider of Software Composition Analysis by Independent Research Firm

New report highlights insights about software composition analysis (SCA) vendors, as the need for automated Application Security increases exponentially

FULTON, MD – Jan 25, 2019 - Sonatype, the leader in automated open source governance, announced it has been recognized as one of five “large” SCA Specialists in Forrester Research’s new Now Tech: Software Composition Analysis, Q1 2019 report. According to Forrester, the report was developed to help security professionals understand the value, and increasing need, for SCA as well as the types of programs and strategies that various vendors provide, based on size and functionality.

Sonatype Partners With All Day DevOps to Educate More Than 1 Million People Through an Expanded 2018 Program

The world’s largest DevOps conference will offer sessions from 125 experts

FULTON, MD - October 12, 2018 -  All Day DevOps, the largest conference in the world dedicated to sharing DevOps best practices, in partnership with Sonatype, the leader in automated open source governance and application security, today announced an expanded 2018 program, updated agenda and full list of sponsors. The free conference, which streams live for 24 hours starting at 8:00 am GMT on October 17, 2018 (3:00 am New York, 7:00 pm Sydney), now features 125 practitioner-led sessions, across five tracks, including keynotes from:

  • Amélie Koran, Deputy Chief Information Office, HHS Office of Inspector General
  • Cindy Healy, Director, Microsoft Worldwide Learning Experiences
  • Dave Rensin, Director of Customer Reliability Engineering and Network Capacity, Google
  • George Swan, Director of Engineering Solutions, Autodesk
  • Rob England, Managing Director, Two Hills Ltd

Sonatype’s 2018 State of the Software Supply Chain Report Reveals Use of Vulnerable Open Source Increased 120%, Despite Equifax Breach

New data shows managed software supply chains are 2X more efficient and 2X more secure

FULTON, MD - September 25, 2018 - Sonatype today released its fourth annual State of the Software Supply Chain Report which found that software developers downloaded more than 300 billion open source components in the past 12 months, and that 1 in 8 of those components contained known security vulnerabilities.