Featured Article

This npm Package Could Have Brought Down Cloudflare’s Entire CDN and Millions of Websites

By Ax Sharma on July 16, 2021 vulnerabilities

Cloudflare has patched a critical vulnerability in its open source content delivery network, CDNJS, that threatened the security, integrity, and availability of the wider supply chain.

Read More...

What Developers Need to Know About WhatsApp's Recent Security Dilemma

By Katie McCaskey on October 08, 2019 AppSec

Sonatype issues an Advisory Deviation Notice for CVE-2019-11932, a vulnerability that exploits processor memory and recently affected WhatsApp.

Read More...

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

By Wayne Jackson on December 16, 2014 Cyber Supply Chain Management and Transparency Act

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

By Wayne Jackson on December 08, 2014 Cyber Supply Chain Management and Transparency Act

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

Code, Cars, and Congress: A Time for Cyber Supply Chain Management

By Wayne Jackson on December 05, 2014 Cyber Supply Chain Management and Transparency Act

Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

Open Source Observations from RSA

By Karen Gardner on March 18, 2014 HP Fortify

Open Source Observations from RSA

Read More...

Sonatype & HP Partnership Offering a New Breed of Application Security

By Ryan Berg on February 24, 2014 Component Lifecycle Management

Today Sonatype and HP announced Sonatype’s Component Lifecycle Management (CLM) analysis technology has been integrated into HP’s cloud-based software security solution – HP Fortify on Demand.

Read More...

Software composition analysis

Container + Infrastructure Security

CODE QUALITY ANALYSIS

Repository MANAGEMENT

Pricing

For Professionals

For Industries

Content

INtegrations & FREE TOOLS

CUSTOMER Portal

About us

Contact Us

Sonatype Blog

This npm Package Could Have Brought Down Cloudflare’s Entire CDN and Millions of Websites

What Developers Need to Know About WhatsApp's Recent Security Dilemma

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Open Source Observations from RSA

Sonatype & HP Partnership Offering a New Breed of Application Security

Products

Free Tools

Solutions

Resources

Customer Portal

Company