Sonatype proudly supports the open source community through its longstanding partnership with the Apache Software Foundation (ASF), home to more than 320 active projects and over 8,400 contributors worldwide.

Sonatype actively engages with the CNCF ecosystem through community building and technical leadership in the Technical Advisory Group for Security & Compliance.

Sonatype maintains an active membership with the Eclipse Foundation, one of the world’s leading open source organizations, home to 400+ projects including Adoptium, Jakarta EE, and the Eclipse IDE.

Sonatype plays an active role in this working group, uniting industry, open source foundations, and government to shape policies like the EU Cyber Resilience Act. Acting as a bridge between the Linux Foundation, ASF, and EU institutions, Sonatype, led by Brian Fox, Co-Founder and CTO, helps ensure open source voices are represented in regulatory discussions.

Sonatype is a proud member of FINOS (the Fintech Open Source Foundation), collaborating to advance open source standards, security, and innovation across the financial services industry. Through contributions to key initiatives and leadership roles, we help ensure secure, compliant open source adoption in highly regulated environments.

Sonatype maintains an active membership with the Linux Foundation, supporting open collaboration across critical technology ecosystems. This membership enables participation in key research efforts and access to member-only initiatives and events, helping us amplify our voice in open source security and software supply chain innovation.

Sonatype is a key collaborator with the Open Source Security Foundation (OpenSSF), helping to shape best practices and innovations for securing open source software. As part of the Board of Directors, Technical Response Group, and End User Working Group, Sonatype leads initiatives like the Open Source Project Security Baseline and drives strategic conversations on cybersecurity policy, contributing to important industry reports and shaping the future of open-source security. This partnership strengthens Sonatype’s leadership in securing the software supply chain.

Microsoft Azure Marketplace customers can easily procure, deploy, and integrate software supply chain security solutions within their Azure environments, allowing them to identify and mitigate open-source risks, automate governance, and optimize cloud spend while maximizing their existing Azure commitments

Red Hat OpenShift is an enterprise-grade Platform-as-a-Service (PaaS) that allows development teams to quickly develop, host, and scale applications in a cloud environment.