Skip Navigation

Press Releases

Critical Log4j Vulnerability Still Being Downloaded 40% of the Time, Sonatype Research Reveals in New Resource Center

Sonatype’s free scanning and analysis tools allow developers to quickly detect and remediate Log4j vulnerabilities Fulton, MD – December 22, 2022 – ...

Sonatype Expands Support for Open Source Communities with Key Partnerships

Company joins the Open Source Security Foundation and OpenChain Project, sponsors Python Software Foundation October05, 2021 -- Fulton, Md. -- ...

Open Source Continues to Fuel Digital Transformation, Sonatype's 2021 Software Supply Chain Report Reveals Important Trends

Developer Demand for Open Source Increased 73% Year over Year; 29% of Popular Project Releases Are Vulnerable, Highlighting the Critical Need for ...

Sonatype Launches Novel Deep Code Analysis Platform Designed for Developers

The cloud-native platform, Sonatype Lift, enables developers to find and fix performance, reliability, and security bugs by automatically analyzing ...

Finalists Announced for Inaugural Sonatype Elevate Awards

Awards celebrate bold innovators and fearless experimenters transforming software supply chain management and delivering stunning successes with ...

Amazic Announces New Partnership With Sonatype to Bring More Enterprises Developer-Friendly, Full-Spectrum Software Supply Chain Automation and Security

AMSTERDAM - June 10, 2021 - Amazic Distribution, one of EMEA’s largest trusted suppliers and solution advisors for partners, individuals and many of ...

Sonatype Embraces CycloneDX Standard for Integrating Software Bills of Materials (SBOMs)

CycloneDX API Creates Standardized Way to Integrate and Share SBOMs May 13, 2021 -- Fulton, Md. -- Sonatype, the leader in developer-friendly tools ...

Sonatype Helps Organizations Manage Open Source License Obligations and Speed up Legal Compliance with New Tool

The Advanced Legal Pack mitigates license risk through automation, providing a more efficient way to collect, compile, report, and remediate open ...

Sonatype’s Channel Partner Program Experiences Triple Digital Growth in EMEA For the Second Year Running

Channel-first strategy, including investment in strategic hires, tooling and infrastructure dramatically increases revenue and market penetration ...

Sonatype Unveils Full-Spectrum Software Supply Chain Management Platform

Company dramatically expands portfolio with new developer-first features, the acquisition of MuseDev, and launch of its Nexus Container and ...

Sonatype Acquires MuseDev

Acquisition pairs developer-friendly source code analysis with full-spectrum software supply chain management. Fulton, MD – Tuesday, March 16, 2021 — ...

Sonatype Adds Infrastructure as Code Security and Compliance

New Infrastructure as Code Pack for Nexus Lifecycle brings developer-friendly cloud and open source security together in one place. Fulton, MD — ...

Sonatype Adds Cloud-Native Container and Kubernetes Security for Developers

Powered by NeuVector, Nexus Container provides developer-friendly security and continuous visibility into the composition, and management of ...

Russian Enterprises Turn to Swordfish Security and Sonatype to Combat Risk Associate With Open Source

MOSCOW -- February 25, 2021 - Swordfish Security, a leader in Russian application security and enterprise digital transformation projects, today ...

Bahwan CyberTek Partners With Sonatype to Mitigate Security Vulnerabilities in Open Source Software

DUBAI, UAE, Feb. 18, 2021 -- Bahwan CyberTek (BCT), a global leader in digital transformation, announced a strategic partnership with Sonatype, a ...

Sonatype Partners With SVA System Vertrieb Alexander GmbH to Help Enterprises Mitigate Risk and Build Software More Securely

Wiesbaden, Germany – January 19, 2021 - Sonatype, a leader in open source security and license compliance management, announced today a partnership ...