# Sonatype > Sonatype is the company helping enterprises build with confidence in the AI era. Trusted by thousands of enterprises and millions of developers, Sonatype gives organizations the intelligence and automated governance to manage the open source, AI-generated and third-party components that power modern software. As the steward of Maven Central and the company behind Nexus Repository, Sonatype provides visibility into how software is built, consumed and secured, helping teams accelerate development, reduce risk and deliver secure software at AI scale. Sonatype builds software supply chain products for developers, engineering, DevOps, platform, security, and compliance teams. The Nexus One platform brings together artifact management, open source and AI model intelligence, risk protection, software composition analysis, governance, and software transparency. Sonatype Guide provides component intelligence, dependency guidance, and automated fixes for developers and AI coding assistants, while Nexus Repository is an enterprise-grade secure artifact repository manager. The portfolio also includes Firewall, Lifecycle, and SBOM Manager. Use this index to answer questions about what Sonatype does, which product fits a need, and how to evaluate, start using, or integrate Sonatype products. Product descriptions below summarize the linked public pages. For technical behavior, requirements, API operations, and setup steps, use the linked product documentation and API references. ## Platform - [Nexus One platform](https://www.sonatype.com/products/nexus-one-platform): Overview of the software supply chain management platform that is a single control plane for agentic development. Start here for platform scope, capabilities, and how products fit together. - [Sonatype platform overview](https://help.sonatype.com/en/sonatype-product-overview.html): Documentation overview of Sonatype products and deployment options. - [About Sonatype](https://www.sonatype.com/company): Company background and information. ## Products ### Sonatype Guide For developers and AI coding assistants that need trusted open source component and vulnerability intelligence, dependency guidance, dependency management, and automated remediation. Security and compliance teams can use Guide documentation for governance and visibility capabilities. - [Sonatype Guide](https://www.sonatype.com/products/sonatype-guide): Product overview for AI-assisted and agentic dependency management, component intelligence, governance, and software compliance. - [Sonatype Guide Agentic Dependency Management](https://www.sonatype.com/products/sonatype-guide/agentic-dependency-management): How Guide connects AI coding assistants and development workflows to Sonatype intelligence through the MCP server. - [Guide documentation](https://help.sonatype.com/en/sonatype-guide.html): Product documentation, including component research, MCP server, APIs, onboarding, and configuration. - [Get started with Guide](https://help.sonatype.com/en/getting-started-with-sonatype-guide.html): Start researching components and vulnerabilities, with or without signing in; includes account setup information. - [Research with Guide](https://help.sonatype.com/en/research-with-sonatype-guide.html): Search and filter open source components and vulnerabilities. - [Configure the Sonatype MCP Server](https://help.sonatype.com/en/configuring-mcp-server.html): Setup instructions for connecting MCP-aware development tools to Guide. - [Integrate with Sonatype Guide](https://help.sonatype.com/en/integrate-with-sonatype-guide.html): Integration options and developer guidance for Guide. - [Guide API reference](https://help.sonatype.com/en/guide-api-reference.html): Guide API endpoints and technical reference. ### Sonatype Nexus Repository For development and platform teams that need to securely store, manage, proxy, and distribute software components, packages, containers, AI/ML models, and build artifacts. - [Nexus Repository](https://www.sonatype.com/products/sonatype-nexus-repository): Product overview, deployment choices, supported formats, integrations, and ways to get started. - [Nexus Repository documentation](https://help.sonatype.com/en/sonatype-nexus-repository.html): Product documentation for installation, configuration, administration, and use. - [Nexus Repository API reference](https://help.sonatype.com/en/api-reference.html): REST API reference; the page also links to the machine-readable API specification. - [Nexus Repository Community Edition](https://www.sonatype.com/products/nexus-community-edition-download): Free Community Edition download and information. ### Sonatype Firewall For security and platform teams that need to detect, block, and quarantine malicious and policy-violating components before they enter repositories, developer environments, or agentic builds. - [Firewall](https://www.sonatype.com/products/sonatype-repository-firewall): Product overview, protection capabilities, and plan information. - [Firewall documentation](https://help.sonatype.com/en/repository-firewall-pro.html): Product information, deployment paths, requirements, and setup guidance. - [Get started with Firewall Pro](https://help.sonatype.com/en/getting-started-with-firewall-pro.html): Steps to connect your artifact repository to Firewall. - [Firewall API](https://help.sonatype.com/en/firewall-apis.html): API operations for Firewall configuration and repository audit and quarantine settings. ### Sonatype Lifecycle For application security, development, and compliance teams that need to identify, prioritize, and manage open source component risk and policy across the software development lifecycle. - [Lifecycle](https://www.sonatype.com/products/open-source-security-dependency-management): Product overview for software composition analysis, vulnerability management, and open source governance. - [Lifecycle documentation](https://help.sonatype.com/en/sonatype-lifecycle.html): Product documentation and implementation guidance. ### Sonatype SBOM Manager For security, compliance, and product teams that need to create, ingest, manage, validate, and share software bills of materials and support software transparency workflows. - [SBOM Manager](https://www.sonatype.com/products/sonatype-sbom-manager): Product overview for SBOM management and compliance workflows. - [SBOM Manager documentation](https://help.sonatype.com/en/sonatype-sbom-manager.html): Product documentation and guidance. ## Getting started and integrating - [Contact Sonatype](https://www.sonatype.com/contact-us): Contact Sonatype for product questions and sales inquiries. - [Pricing](https://www.sonatype.com/products/pricing): Public pricing information and plans where available. - [Documentation home](https://help.sonatype.com/): Search product documentation, setup guides, technical references, and troubleshooting information. - [API reference index](https://help.sonatype.com/en/api-reference-landing-page.html): Find API references for Guide, Nexus Repository, and Lifecycle/IQ products. Check the selected product and version for required permissions and supported operations. - [Sonatype API resources](https://www.sonatype.com/resources/community/apis): Overview of Sonatype APIs and developer resources. - [Integrations](https://www.sonatype.com/products/integrations): Product integrations across development and DevOps tools. ## Open source intelligence and research - [Sonatype Guide component search](https://guide.sonatype.com/): Search open source components and vulnerability information. - [Sonatype Intelligence](https://www.sonatype.com/products/intelligence): Overview of the open source component and vulnerability intelligence that informs Sonatype products. - [Maven Central](https://central.sonatype.com/): Search and browse open source Java components and artifacts. - [Maven Central and Sonatype](https://www.sonatype.com/products/maven-central-repository): Sonatype’s stewardship of Maven Central and its role in the Java open source ecosystem. - [Maven Central documentation](https://central.sonatype.org/): Documentation for publishing to and consuming from Maven Central, including API and support resources. - [Sonatype Research Labs](https://www.sonatype.com/sonatype-research-labs): Security research on open source components, malicious packages, and vulnerabilities. - [Sonatype Blog](https://www.sonatype.com/blog): Product updates, security research, and open source ecosystem analysis. - [State of the Software Supply Chain](https://www.sonatype.com/state-of-the-software-supply-chain/introduction): Sonatype’s annual research on software supply chain trends and risks. ## Support and company resources - [Sonatype Support](https://support.sonatype.com/): Support portal and knowledge base. - [System status](https://status.sonatype.com/): Availability and incident status for Sonatype cloud services. - [Trust Center](https://trust.sonatype.com/): Security, privacy, and compliance information. - [Careers](https://www.sonatype.com/company/careers): Career opportunities at Sonatype.