Sonatype

Sonatype is a software supply chain security and open-source/AI governance company whose platform includes Nexus Repository for centralized artifact management, plus products for SCA, malware blocking, and SBOM governance.