Phylum vs Sonatype
PhylumSupply Chain Security
SonatypeSoftware Composition Analysis
$175+ / yearPublished price
Phylum Supply Chain Security Software supply chain security platform. | Sonatype Software Composition Analysis Secure your software supply chain. | |
|---|---|---|
| Overview | ||
| Category | Supply Chain Security | Software Composition Analysis |
| What it is | Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities. | Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance. |
| Pricing | ||
| Published price | Phylum does not publish a reliable numeric rate card. Pricing is treated conservatively as custom until a current vendor or authorized channel price can be cited. | $175+ / year Nexus Repository OSS: Free (open source) Nexus Repository Pro: $175/year Sonatype Lifecycle: Custom pricing |
| Pricing model | Custom quote | Tiered plans |
| Free options | Free plan · No free trial | Free plan · Free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2020 | 2008 |
| Team size | 11-50 employees | 501-1000 employees |
| Headquarters | Evergreen, Colorado | Fulton, Maryland |
| Featured clients | Security-conscious enterprises | Capital One, Equifax, Delta Airlines |