Sonatype

Software supply chain management built on open source component analysis and repositories.

Sonatype maintains the Maven Central repository and sells tools that inventory, evaluate, and control open source and third-party components in software builds, including its Nexus repository and lifecycle products. Teams use it to enforce component policy and respond quickly to dependency vulnerabilities, with growing coverage of AI-generated code. It was founded in 2008.

Category: Supply Chain & Secrets
Founded: 2008
Funding: $156M raised (Private Equity, 2018)
Website: https://www.sonatype.com

Seen at Black Hat USA 2026 (Gold sponsor, booth 5132).

Visit website

Outbound clicks are tokenized for directory analytics.