DEPLOYMENT OPTIONS
Sonatype Runs Anywhere
Sonatype's flexible deployment models let you run anywhere — in the cloud, on-premises, or air-gapped.
CLOUD
Effortless Cloud Deployment
Sonatype on the cloud automates maintenance and infrastructure, making it simpler than ever to secure your SDLC. All products now available in the AWS Marketplace.
Scale Easily in the Cloud
Simplify Integration
Spend Efficiently
Trust Enterprise Quality
SELF-HOSTED
Deploy on Your Terms
Store and operate Sonatype on your own hardware. Implement and automate security policies that match your specific risk criteria.
Automate Security
Keep Control In-House
Scale with Ease
Add to Existing Solutions
AIR-GAPPED
Deploy in a Zero-Trust Environment
Ensure the highest levels of security and compliance at all stages of development. Government agencies and other highly regulated industries can avoid the public internet and even other network within their organizations.
Maximize Security
Scale When You Need
Log Data Efficiently
Integrate Seamlessly
Enterprise Support and Security
The Sonatype Technical Support Team provides world class support for all three deployment options as part of the subscription at no additional cost. Cloud customers receive extended support with 24x7x365 coverage for Sev-1 (production outage) issues as part of their subscription.
Browse Resources
Frequently Asked Questions
What deployment options does Sonatype offer?
How do I choose between deployment models?
The Sonatype solutions are available in multiple deployment models to meet the security, infrastructure, and connectivity needs of any organization, helping you choose the option that best aligns with your operational and regulatory requirements.
SaaS (Sonatype-hosted) deployments are fully managed by Sonatype and run in the cloud, offering the fastest time to value with no infrastructure to maintain, automatic updates, and built-in scalability. This model is ideal for teams that want to reduce operational overhead while benefiting from continuously updated intelligence and policies.
On-premises or self-hosted deployments provide full control over where and how the platform runs, making them well suited for organizations with strict data residency, compliance, or integration requirements. Teams can operate Sonatype solutions within their own infrastructure while maintaining alignment with existing security and governance practices.
For highly regulated organizations operating in classified, restricted, or sensitive environments, Sonatype supports fully disconnected deployments through the Sonatype Air-Gapped Environment (SAGE). SAGE enables these organizations to apply the same vulnerability intelligence, policy enforcement, and software supply chain protections without any direct internet access, using tightly controlled, offline update mechanisms that align with strict compliance and security requirements.
Sonatype solutions can be deployed wherever your software development and delivery pipelines operate — from fully cloud-managed environments to the most tightly regulated and disconnected systems.