Sonatype

Sonatype is the developer-friendly full-spectrum software supply chain management platform helps organizations and software developers. Put simply, it is about assessing, monitoring and responding to security threats on your behalf.

It makes the most sense for companies without a full security team. Alongside the main category they mention Cyber Security, Developer Tools and Open Source. They are a large team, 501 to 1,000 people, which usually shapes who they work with. At that size expect formal onboarding, documentation and a longer sales cycle.

Sonatype is based in Fulton, Maryland and founded in 2008. More on sonatype.com.

Things worth asking about: response times, what is included in monitoring, and reporting. Ask for a trial on your own data, not a canned demo.

Every review on Revaw shows how it was verified, so if you know Sonatype well, your review carries weight here.