Nexus Platform Overview

Automate container security and scale DevOps with Lifecycle container analysis.

Automate open source governance and scale DevOps with precise intelligence for Java components.

Automate open source governance and scale DevOps with precise intelligence for JavaScript components.

Automate open source governance and scale DevOps with precise intelligence for .Net components.

Proxy and host PyPI components and define and enforce rules for PyPI component usage to ensure only the best PyPI components enter your Nexus Repository.

The Nexus Platform plugin for Jenkins pushes component intelligence into GitHub where developers can view and respond to policy violations.

Generate a software bill of materials for PHP components to identify potential security risks and prioritize remediation based on severity.

Generate a software bill of materials for Swift components to identify potential security risks and prioritize remediation based on severity.

Generate a software bill of materials for CocoaPods to identify potential security risks and prioritize remediation based on severity.

Proxy and host Ruby Gem repositories and generate a software bill of materials for Ruby Gem components to identify potential security risks.

Generate a software bill of materials for C and C++ components to identify potential security risks and prioritize remediation based on severity.

Empower developers with precise component intelligence directly within the Eclipse IDE.

Empower developers with precise component intelligence directly within IntelliJ IDEA.

Empower developers with precise component intelligence directly within Microsoft Visual Studio.

Shift security and quality practices left by automatically sending alerts or failing Jenkins builds when application components are out of compliance with your open source policies.

Shift security and quality practices left by automatically sending alerts or failing Bamboo builds when application components are out of compliance with your open source policies.

Infuse your Maven builds with the most precise component intelligence and automatically fail builds based on policy violations, including violations found in transitive dependencies.

View Sonatype's precise component intelligence directly in SonarQube 6.x projects and dashboards, ensuring teams are evaluating every facet of high-quality application development.

Identify the risk associated with open source components used within your applications and understand where those applications are deployed - QA, UAT, Production.

Node.js developers, Grunt users, and others can use Nexus Repository Manager to proxy npmjs.org and locally host their own npm packages.

.Net developers can take advantage of the NuGet package manager and the integration in VisualStudio to manage their own and third-party packages.

Use Nexus Repository Manager to proxy and host Bower repositories.

Establish a deployment pipeline from your Maven build to your Linux servers using RPM packages and YUM repositories.

Define and enforce rules for RPM usage to ensure only the best RPM components enter your Yum Nexus Repository.

Reduce download times by hosting large files locally in Nexus Repository, so all of your binaries are managed in one central location.

Manage and secure open source and third party components in the cloud with Nexus Repository and IQ Server.

Use Nexus to store and manage binaries, build artifacts, and Docker containers within your OpenShift environment.

Deploy Nexus Repository as a free solution for managing open source components and Docker containers within DC/OS.

Connect Nexus Repository to the same security backend as Confluence, Bamboo, and JIRA.

The Nexus Notifier plugin for Jenkins pushes component intelligence into Bitbucket Code Insights where developers can view and respond to policy violations.

Gain a 360-degree of all of your application security issues with integration to Fortify SSC and Fortify On-Demand.