Sonatype Repository Firewall Reviews

Name: Sonatype Repository Firewall
Brand: Sonatype
Rating: 4.1 (4 reviews)

4.1 out of 5

4 reviews
100% willing to recommend

358 followers

What is Sonatype Repository Firewall?

Sonatype Repository Firewall is a cloud-based security solution designed to safeguard your software supply chain against malicious components. It operates by meticulously scanning and evaluating each new component against customized governance policies, thereby effectively identifying and blocking potential threats before they infiltrate your development pipeline. What sets Sonatype Repository Firewall apart is its user-friendly setup, seamless integration with existing workflows, and remarkable scalability, making it suitable for software development environments of any size. Key features include blocking malicious components through behavioral analysis, malware scanning, and vulnerability assessment, as well as the ability to enforce custom governance policies. By utilizing this tool, organizations can enhance their software supply chain security, mitigate risks related to supply chain attacks, bolster compliance with industry standards, and ultimately reduce costs associated with security incidents.

Get the Application Security Tools Buyer's Guide and find out what your peers are saying about Sonatype Repository Firewall, SonarQube Server (formerly SonarQube), GitLab and more!

Sonatype Repository Firewall is the #16 ranked solution in top Software Composition Analysis (SCA) solutions and #34 ranked solution in application security solutions. PeerSpot users give Sonatype Repository Firewall an average rating of 8.2 out of 10. Sonatype Repository Firewall is most commonly compared to SonarQube Server (formerly SonarQube): Sonatype Repository Firewall vs SonarQube Server (formerly SonarQube). Sonatype Repository Firewall is popular among the large enterprise segment, accounting for 75% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 28% of all views.

Buyer's Guide

Application Security Tools

December 2024

Get the category report

Helped 831,158 peers since 2012

Featured reviews

Ashish Shukla

Global Treasurer at Genpact

For the QA team, it's a really good tool. For those who are not on the QA team, it is also a good tool to use for SDL in the SDLC. It plays a very critical role of doing the automatic quality check recommendation. Meaning, when using this tool, people can easily rectify the issues in the environment itself, instead of going to a higher environment and identifying them. This tool is quite easy to use and learn. We decided that there was no need to hire anyone new who would specialize in this. We had a team of about five to ten people who learned how to use this tool. There are some other automation tools like Jenkins, for example, that require a lot of effort to configure and write out the code, but you do not need to do such for this tool. I thought outside of the box and saw that there are many options available to us when using this tool. The plugins are there, you can download and use the tool at ease and you do not need to do any kind of development. Overall, it’s quite easy to use.

Read full review

reviewer1534461

Senior Cyber Security Architect and Engineer at Microsoft

The Nexus Firewall itself, with its sheer ability to ensure that you're downloading safe code, is a big win for our environment. Another thing that I like about Sonatype is that if you download something today, and five days from today it becomes vulnerable, it will notify you. When you go to the IQ Server dashboard, it will tell you, "Version 1.2 is not good. You should upgrade it to version 1.3." You have that visibility, and you can whitelist things based on your business justification, and you can add notes in there as well. In terms of securing our software supply chain, what we're trying to do is set things up so that they're upstream from our developers' work stations. Aside from downloading the code safely through Sonatype, a second way is by pushing our developers' code into a repository and Sonatype will do the security evaluation. You can use it as a hosted repository, versus using ADO which does not provide security evaluation and scanning. It helps bring open source intelligence and policy enforcement across our SDLC.

Read full review

reviewer2163405

Student at a university with 51-200 employees

The product helps with vulnerability and security assessment. It also helps with assessment at the configuration level. The product's network and intrusion protection features are valuable. It also has rules and compliance features for security. The tool needs to improve its file systems. The…

Read full review

Sonatype Repository Firewall mindshare

Product category:

As of January 2025, the mindshare of Sonatype Repository Firewall in the Application Security Tools category stands at 0.3%, up from 0.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

Key learnings from peers

Last updated Jan 20, 2025

Valuable Features

Sonatype Repository Firewall ensures safe code downloads with proactive alerts for vulnerabilities. Users benefit from visibility on version updates and whitelisting features based on business needs. It scans developers' code and offers a hosted repository with security evaluation, supporting open-source intelligence. The tool is user-friendly, requiring minimal training. It includes robust network and intrusion protection, accurate threat detection, and compliance features. Reliable database support ensures identification of malicious code, providing critical roles in software lifecycle management.

"The customer service is fantastic."
"The firewall is the only solution that supports Nexus Repository."
"The product's network and intrusion protection features are valuable. It also has rules and compliance features for security."

Room for Improvement

"There are several features lacking in the current offering, particularly concerning container support and AI packages, like humming phase support."
"There are several features lacking in the current offering, particularly concerning container support and AI packages."
"The tool needs to improve its file systems. The product should also include zero test feature."

Pricing

"The pricing is reasonable if you're a large enterprise developing code. It's not super-expensive."

Popular Use Cases

Organizations primarily use Sonatype Repository Firewall for vulnerability detection in open-source code, managing security risks, and preventing malicious packages from infiltrating internal networks. It supports on-premises deployment for confidentiality and offers High Availability with multiple instances of Nexus Repositories and IQ Servers. It is utilized for quality assurance, code quality checks, and security assessment. Users benefit from automated code promotion processes validated through set quality thresholds and Sonar Quality Gates.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Application Security Tools Buyer's Guide for additional reliable information.