Decrease the risk of a security breach by automatically blocking known vulnerabilities and harmful OSS releases.
Critically malicious components and newly released suspicious components are automatically blocked, so your SDLC is always secure.
Components that clear suspicious rating are automatically released to be consumed by developers, reducing time spend reviewing components and reducing friction.
Decide which components are allowed into your SDLC based on common risk factors, including age, popularity, and licensing credentials.
Firewall automatically returns secure versions of component version range requested so that developers spend less time choosing the most secure version.
Native integration with Nexus Repository and support for JFrog Artifactory Enterprise with high availability.
Sonatype’s Artificial Intelligence evaluates open source software (OSS) components based on different behaviors and determines if something is a potential threat or not. Those that are “known bad” (critically malicious/harmful OSS release) are automatically blocked from download. Your developers won’t even have the chance to choose components with known vulnerabilities.
Those identified as potential threats, specific to npm packages, are also quarantined until they’re confirmed or cleared of vulnerabilities by Sonatype’s security research team. If cleared, it is automatically released based on your policy.
Sonatype’s Artificial Intelligence evaluates open source software (OSS) components based on different behaviors and determines if something is a potential threat or not. Those that are “known bad” (critically malicious/harmful OSS release) are automatically blocked from download. Your developers won’t even have the chance to choose components with known vulnerabilities.
Those identified as potential threats, specific to npm packages, are also quarantined until they’re confirmed or cleared of vulnerabilities by Sonatype’s security research team. If cleared, it is automatically released based on your policy.
Use Sonatype’s out-of-the-box policy options or customize your own. Your policy settings dictate what OSS components are allowed into your SDLC, what is put into quarantine, and what is released from quarantine. Customize your rules based on common risk factors like popularity, and licensing credentials, and address known and unknown vulnerabilities via Sonatype’s Integrity Rating. From there, configure policy actions to automatically prevent applications from moving forward with unwanted or unapproved components.
Use Sonatype’s out-of-the-box policy options or customize your own. Your policy settings dictate what OSS components are allowed into your SDLC, what is put into quarantine, and what is released from quarantine. Customize your rules based on common risk factors like popularity, and licensing credentials, and address known and unknown vulnerabilities via Sonatype’s Integrity Rating. From there, configure policy actions to automatically prevent applications from moving forward with unwanted or unapproved components.
“[Sonatype] has helped developer productivity. It’s like working in the dark and all of a sudden you’ve got visibility. You can see exactly what you’re using and you have suggestions so that if you can’t use something, you’ve got alternatives. That is huge.”
“[Sonatype] has helped developer productivity. It’s like working in the dark and all of a sudden you’ve got visibility. You can see exactly what you’re using and you have suggestions so that if you can’t use something, you’ve got alternatives. That is huge.”
Empower teams with precise component intelligence to enforce policies and continuously remediate risk.
LEARN MORE >
Need Cloud? Sign up for Early Access.
Empower teams with precise component intelligence to enforce policies and continuously remediate risk.
Idenfify and remediate OSS risk in containers for build and run-time protection.
Manage libraries and store artifacts in a universal repository and share them across development teams.
Generate a software bill of materials to identify open source components used within third-party or legacy apps.
See Firewall in Action
