Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

DevSecOps Next Generation - Securing Your Binaries. Identify security flaws and license violations early in development and block builds that have security issues before deployment. Automated and continuous auditing and governance of software artifacts throughout the software development cycle, from code to production. Additional functionalities include: - Deep recursive scanning components, drilling down to analyze all artifacts/dependencies and creating a graph showing the relationships between software components. - On-Prem or Cloud, Hybrid, Multi-Cloud Solution - An impact analysis of how one issue in a component affects all dependent parts with a display chain displaying the impacts in a component dependency diagram. - JFrog's vulnerability database is continuously updated with new component vulnerabilities data. VulnDB is the industry's most comprehensive security database.

Description

Sonatype Repository Firewall is designed to safeguard your software development pipeline from malicious open-source packages by utilizing AI-driven detection to intercept potential threats. By monitoring and analyzing over 60 signals from public repositories, the platform ensures that only secure components enter your SDLC. It provides customizable risk profiles and policies that allow automatic blocking of risky packages before they are integrated. With Sonatype Repository Firewall, organizations can maintain high standards of security and compliance, while enhancing DevSecOps collaboration and preventing supply chain attacks.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

ArmorCode
Boozang
Cider
JFrog Connect
Kondukto
Maverix
Mend.io
OpsLevel
OpsMx Enterprise for Spinnaker
Phoenix Security
Prometheus
ReleaseIQ
Rezilion
Seeker
Testlemon
Tromzo
Vulcan Cyber

Integrations

ArmorCode
Boozang
Cider
JFrog Connect
Kondukto
Maverix
Mend.io
OpsLevel
OpsMx Enterprise for Spinnaker
Phoenix Security
Prometheus
ReleaseIQ
Rezilion
Seeker
Testlemon
Tromzo
Vulcan Cyber

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

JFrog

Founded

2008

Country

United States

Website

jfrog.com/xray/

Vendor Details

Company Name

Sonatype

Founded

2008

Country

United States

Website

www.sonatype.com/products/sonatype-repository-firewall

Product Features

Continuous Integration

Build Log
Change Management
Configuration Management
Continuous Delivery
Continuous Deployment
Debugging
Permission Management
Quality Assurance Management
Testing Management

DevOps

Approval Workflow
Dashboard
KPIs
Policy Management
Portfolio Management
Prioritization
Release Management
Timeline Management
Troubleshooting Reports

IT Security

Anti Spam
Anti Virus
Email Attachment Protection
Event Tracking
IP Protection
Internet Usage Monitoring
Intrusion Detection System
Spyware Removal
Two-Factor Authentication
Vulnerability Scanning
Web Threat Management
Web Traffic Reporting

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Alternatives

aqua cloud Reviews

aqua cloud

aqua cloud GmbH

Alternatives

Revenera SCA Reviews

Revenera SCA

Revenera
AppScan Reviews

AppScan

HCLSoftware