Login Contact Us Book a Demo

The Sonatype Newsroom

Explore Sonatype's latest announcements, media coverage, threat research, brand assets, and more.

Featured News and Stories

October 14, 2026

Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components Before Developers or AI Agents Pull Them Into Builds

Open source packages, AI models and MCP servers are screened as soon as developers or AI agents request them, so only trusted components reach the ...

Read More

white logo of

Security Teams Are Fixing Vulnerabilities Faster Than Ever. So Why Is Software Getting Riskier?

October 6, 2026

white logo of

Sustaining Package Registries: Why Enterprise Support Is Essential

September 16, 2026

Press Releases

Open Source, News and Views, Product Updates, Sonatype Research

Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components Before Developers or AI Agents Pull Them Into Builds

October 14, 2026
Read More
News and Views, Product Updates, Sonatype Research

Sonatype Moves Control Upstream and Automates Fixes in AI-Driven Software Development

August 18, 2026
Read More
Open Source, News and Views, Sonatype Research

Sonatype Research Labs Marks 15 Years of Software Supply Chain Intelligence

July 14, 2026
Read More
News and Views

Sonatype Named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

June 18, 2026
Read More
News and Views

Sonatype Names Three Industry Veterans to Executive Team to Lead the Next Chapter of Agentic Development

June 9, 2026
Read More
News and Views, Product Updates, Sonatype Research

Sonatype Firewall Extends Malicious Package Protection to Any Repository

May 27, 2026
Read More
See All Press Releases

Sonatype Threat Research

Powering unmatched visibility and insights

Sonatype’s world-class Security Research team leads the market in identifying and analyzing threats within the open source ecosystem. With a combination of automated intelligence, expert analysis, and secondary expansion, the team uncovers new forms of open source malware, software supply chain attacks, and emerging vulnerabilities. From in-depth reports to real-time threat detection, Sonatype Security Research powers the insights that keep our customers ahead of adversaries and sets the standard for trust in software development.

Learn more

In the News

uk-tech-news-uktn-logo

Your Code Is Mostly Other People’s Code – A Developer’s Guide to Securing Dependencies

November 3, 2026
Continue
Metro-logo

There’s a security crisis affecting 70% of websites – how worried should we be?

October 23, 2026
Continue
The Hacker News

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

October 22, 2026
Continue
The Record

Indian tech company eMudhra announces withdrawal from certificate business after security incident

October 22, 2026
Continue
TheStack-logo

OVHCloud CLI repo compromised. Customer reports incident

October 20, 2026
Continue
SDTimes-logo

Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components

October 19, 2026
Continue
See All Media
2026 SSCR hardcover book interior and front

2026 State of the Software Supply Chain Report

Sonatype was the first to share year-over-year analyses of open source consumption and threat data. For over a decade, the State of the Software Supply Chain® Report has provided developers and security teams with insights into trends, risks, and threats related to open source software — ultimately helping them better understand and manage their software supply chains.

Learn more

Press Kit

Access some basic statistics, descriptions, and brand assets you may find helpful when writing about Sonatype.
Contact PR Team
2008
year founded in Fulton, Maryland
0
+
employees from 50 countries and 15 languages
0
+
organizations supported, including 70% of Fortune 100
15 MILLION
developers rely on Sonatype
FULTON, MD
headquarters
MAVEN
Central stewards

Logos

Access our collection of approved corporate logos and brand guidelines for use.
Download

Leadership

Find high-resolution photos of our fearless innovators on the executive team.
Download

Product

Find individual logos for products within the Sonatype Platform.
Download