Trust
Security & compliance
The vendor hasn’t added security or compliance details yet.
Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance.
Pricing
$15+ / month
Founded
2008
Team size
501-1,000 employees
Headquarters
Fulton, Maryland
At a glance
Pricing model
Tiered plans
Try before you buy
Integrates with
JenkinsGitHub ActionsGitLab CI/CDMavenHugging Face+4
About Sonatype
Sonatype provides a comprehensive software supply chain management platform that helps organizations govern the use of open-source and AI components. The platform includes Nexus Repository for artifact management and Sonatype Lifecycle for policy-based SCA.
Key features include real-time vulnerability intelligence from a curated database, automated policy enforcement, SBOM management, malicious package detection, and CI/CD integration. The Nexus Repository is used by millions of developers worldwide.
Sonatype serves development and security teams across enterprises that need to manage open-source risk and ensure compliance with software supply chain security requirements.
Pricing
$15+ / monthTiered plans
Sync Sonatype with Cubbie
Cubbie connects straight to the Sonatype Nexus / IQ admin API, so your seats, usage, and plan stay current without anyone updating a spreadsheet. That is what turns renewals and unused licenses into something you can act on.
Security users (top-level array)Disabled/locked split (Nexus)Product detection repo vs IQ
Connecting takes about a minute. Paste a read-only key from your Sonatype Nexus / IQ admin settings. Cubbie never writes to your account.
Procurement & Fit
Pricing
Commercial model
Pricing model: Tiered plans
Free trial: Yes
Free plan: Yes
Contract minimum: Not specified
Procurement
Purchasing & legal
The vendor hasn’t added purchasing & legal details yet.
Fit
Best-fit company size
Company-size fit has not been specified yet.
Proof, Outcomes & Momentum
Buy through Cubbie
Sonatype
No live offer yet.
