Sonatype Guide
AWS Marketplace
Bring Sonatype's OSS intelligence into AI coding assistants so generated code chooses secure, well-maintained dependencies.
Provenance reach4 of 12
UnknownSource Confirmed
PricingPaid2 plans listed
Evidence riskHigh
Sonatype Inc.
Vendor
External enrichment
CompanySonatype Inc.Automated
Compliance
Government
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
5 agents
Browse all 5 agents in the registry →
Sonatype Lifecycle
AWS Marketplace
Designed to continuously monitor for problems at every stage of the software development lifecycle.
Provenance reach4 of 12
UnknownSource Confirmed
PricingPaid1 plan listed
Evidence riskHigh
Sonatype Repository Firewall
AWS Marketplace
Block malicious open source at the door, before entering your devops pipeline
Provenance reach4 of 12
UnknownSource Confirmed
PricingPaid1 plan listed
Evidence riskHigh
Sonatype SBOM Manager
AWS Marketplace
SBOM Manager for rapid, reliable compliance at scale and sharper development and security posture.
Provenance reach4 of 12
UnknownSource Confirmed
PricingPaid1 plan listed
Evidence riskHigh
Sonatype: Software Supply Chain Security (Private Cloud)
AWS Marketplace
For the more than 90% of companies that rely on open source software (OSS), Sonatype secures the software supply chain. We do this in a way that accelerates digital innovation without sacrificing security or quality across the software supply chain. It is the only automated malware and vulnerability detection solution that will keep your repositories secure, reduce security rework for your developers, and accelerate your time to market. Get started today with Sonatype Lifecycle and Sonatype Repository Firewall.
Provenance reach4 of 12
UnknownSource Confirmed
PricingPaid2 plans listed
Evidence riskHigh