# Sonatype

> Sonatype is the software supply chain management company behind Nexus Repository and the maintainer of Maven Central, the world's largest repository of open source Java components. Founded in 2008 by core contributors to Apache Maven, it helps developers and enterprises find, manage, and secure the open source code that powers modern software - blocking malicious packages, enforcing policy, and generating software bills of materials (SBOMs) across the development lifecycle.

- **Founded:** 2008
- **Headquarters:** Fulton, Maryland, United States
- **Founders:** Jason van Zyl (Founder, creator of Apache Maven and Nexus), Brian Fox (Co-founder & CTO, Apache Maven core contributor)
- **Team size:** ~540 employees
- **Products:** Nexus Repository, Sonatype Lifecycle, Sonatype Repository Firewall, Sonatype SBOM Manager, Sonatype IQ Server
- **Notable:** Creator of Nexus, the world's most popular repository manager, Maintainer of Maven Central, the world's largest repository of open source Java components, First to frame poor-quality open source code as a software supply chain problem

## Products & services

- **Nexus Repository** — The world's most popular repository manager for storing, organizing, and distributing software build artifacts and open source components.
- **Sonatype Lifecycle** — Software composition analysis (SCA) that automatically enforces open source policy and surfaces vulnerabilities across the development lifecycle.
- **Sonatype Repository Firewall** — Blocks malicious and non-compliant open source packages - including vulnerable Docker images - before they enter development environments.
- **Sonatype SBOM Manager** — Generates, ingests, and manages software bills of materials to meet compliance and transparency requirements.
- **Sonatype IQ Server** — The policy and intelligence engine powering Firewall, Lifecycle, SBOM Manager, and Developer solutions.
- **Maven Central** — Sonatype maintains The Central Repository, the world's largest source of open source Java components.

## Achievements

- Creator of Nexus, the world's most popular repository manager
- Maintainer of Maven Central, the world's largest repository of open source Java components
- First to frame poor-quality open source code as a software supply chain problem
- Publishes the annual State of the Software Supply Chain report, now in its 11th+ edition
- Vista Equity Partners acquired a majority interest in 2019

## Latest updates

- **2026-01** — Research reveals open source malware grew 75% as yearly open source downloads surpassed 9.8 trillion across Maven Central, PyPI, npm and NuGet.
- **2025-07** — Cybersecurity veteran Bhagwat Swaroop appointed CEO; longtime CEO Wayne Jackson moves to Executive Chairman role.
- **2025-01** — Sonatype SBOM Manager and Nexus Repository become available in AWS Marketplace.
- **2024-10** — 10th Annual State of the Software Supply Chain report reports a 156% surge in open source malware.

## Links

- Website: https://www.sonatype.com
- LinkedIn: https://www.linkedin.com/company/sonatype
- Twitter/X: https://x.com/sonatype
- GitHub: https://github.com/sonatype
- YouTube: https://www.youtube.com/user/sonatype
- Facebook: https://www.facebook.com/sonatype

---

Profile page: https://yespress.io/sonatype
Published by YesPress — https://yespress.io
Last updated: 2026-06-01