Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Achieve a thorough understanding of your application security landscape. Elevate the maturity of your secure development practices while minimizing the potential risks tied to your offerings. Application Security Posture Management (ASPM) tools are essential for the continuous oversight of application vulnerabilities, tackling security challenges from the initial development stages through to deployment. Development teams often face considerable hurdles, such as managing an expanding array of products and lacking a holistic perspective on vulnerabilities. We facilitate progress in maturity by assisting in the establishment of AppSec programs, overseeing the actions taken, monitoring key performance indicators, and more. By clearly defining requirements, processes, and policies, we empower security to be integrated early in the development cycle, thereby streamlining resources and time spent on additional testing or validations. This proactive approach ensures that security considerations are embedded throughout the entire lifecycle of the application.

Description

Sonatype Repository Firewall is designed to safeguard your software development pipeline from malicious open-source packages by utilizing AI-driven detection to intercept potential threats. By monitoring and analyzing over 60 signals from public repositories, the platform ensures that only secure components enter your SDLC. It provides customizable risk profiles and policies that allow automatic blocking of risky packages before they are integrated. With Sonatype Repository Firewall, organizations can maintain high standards of security and compliance, while enhancing DevSecOps collaboration and preventing supply chain attacks.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Active Directory Yes 
Amazon Inspector Yes 
AquA Pro Yes 
Azure Pipelines Yes 
Bitbucket Yes 
Checkmarx Yes 
ClickUp Yes 
Codefresh Yes 
Dependency Track SaaS Yes 
GitHub Yes 
Google Cloud Platform Yes 
Jenkins Yes 
Jira Yes 
Maverix No 
Redmine Yes 
ServiceNow Yes 
Slack Yes 
Tenable Nessus Yes 
Trello Yes 
Veracode Yes 

Integrations

Active Directory No 
Amazon Inspector No 
AquA Pro No 
Azure Pipelines No 
Bitbucket No 
Checkmarx No 
ClickUp No 
Codefresh No 
Dependency Track SaaS No 
GitHub No 
Google Cloud Platform No 
Jenkins No 
Jira No 
Maverix Yes 
Redmine No 
ServiceNow No 
Slack No 
Tenable Nessus No 
Trello No 
Veracode No 

Pricing Details

$20.99 per asset
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Conviso Platform

Country

Brazil

Website

www.convisoappsec.com

Vendor Details

Company Name

Sonatype

Founded

2008

Country

United States

Website

www.sonatype.com/products/sonatype-repository-firewall

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Alternatives

Alternatives

Xygeni Reviews

Xygeni

Xygeni Security