Sonatype
8161 Maple Lawn Blvd #250, Fulton, MD, 20759, United States
Overview
Sonatype provides software supply chain automation and open-source governance through its Nexus platform, which integrates security into modern development pipelines. Its Nexus Intelligence aggregates open-source health and hygiene data from public and private sources using machine learning and AI, then curates that data with human expertise. The Nexus product suite delivers component intelligence and real-time remediation guidance to help engineering teams make better decisions and move faster. Sonatype has over 300 employees, more than 1,000 enterprise customers, and reaches over 10 million software developers. Over 60 of the Fortune 100 rely on Sonatype’s Nexus products, including major banks, credit card companies, top tech firms, and U.S. Armed Forces. The company reports annual revenue growth close to 250% over the past three years and plans to fast‑track growth and enhance the Nexus product portfolio following its new partnership with Vista Equity Partners. Sonatype develops and operates Nexus, an enterprise-ready repository manager and library that tracks code and helps keep the devops pipeline up-to-date and secure. The company says Nexus monitors millions of open source commits per day and that last year developers downloaded hundreds of billions of components, 12% of which had known security defects. Sonatype has highlighted findings that dozens of Fortune Global 100 companies downloaded outdated, vulnerable versions of Apache Struts — the same class of issue implicated in the Equifax breach. The company plans to use new funding to extend and enhance the Nexus platform. Sonatype reported an 81% year-over-year increase in sales in the first half of the year and added 1.5 million users to Nexus since January. In total it says Nexus has more than 10 million software developers and 1,000 enterprises worldwide. Sonatype builds a configuration and policy engine that sits behind customers’ firewalls to check open-source components against company-defined policies as developers submit code. The product automates blocking or allowing components based on criteria such as outdated versions, insecure implementations, or problematic licenses. The company began as a consulting firm in 2008 and began developing the current solution in 2010. Sonatype counts 12 of the 15 largest global banks as customers and has 90 employees. Management plans to double headcount over the coming year, establish a sales presence in foreign markets, and increase investment in research and development. The company is not currently pursuing an IPO and says there are additional products and markets left to pursue. Sonatype is a Silver Spring, MD-based provider of component lifecycle management technologies, intelligent tools and information services. It operates the Central Repository, a primary source for open-source components that houses more than 400,000 components. The repository serves more than five billion requests per year from over 60,000 organizations, and Sonatype's core open-source projects are used by more than nine million developers. Founded by Jason van Zyl and led by CEO Wayne Jackson, the company produces projects such as Nexus, m2eclipse and Hudson. Sonatype secured $25M in financing and plans to use the funds for product development and global marketing. Sonatype, based in Silver Spring, MD, provides products and services that help organizations optimize their development processes and create standardized development infrastructure. It was founded by Jason Van Zyl, the original author and creator of Apache Maven. Sonatype contributes to and maintains projects including Maven, Maven Central (an open-source, cloud-based repository), Nexus, m2eclipse and P2. The company recently appointed Wayne Jackson as CEO. It raised $11.6M in funding led by Accel Partners to accelerate innovation of its software products and cloud-based services, with Sameer Gandhi of Accel joining the board. Existing investors Hummer Winblad Venture Partners, Morgenthaler Ventures and Bay Partners participated in the round.
- Total raised
- $147M
- Funding rounds
- 6
- Latest round
- Equity
- Latest activity
- Sep 2018
Industries
- Cyber Security
- Developer Tools
- Enterprise Software
- Open Source
- Software
Recent funding
Equity
Sep 2018
$80M
Equity
Feb 2016
$30M
Equity
Jul 2012
$25M
Equity
Sep 2010
$12M