Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Go (Programming Language)
- Linux
- Mac
- Windows
- BSD
United States

Apps similar to Sonatype Pro Suite include OSS Rebuild, which is free and open source. Other options are Artifactory, RepoFlow, Sonatype Nexus Repository OSS and NORA Registry. You can choose from more than 10 Package Managers like Sonatype Pro Suite for Linux, Windows, self-hosting, the web and Mac.
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.

The world’s most advanced repository manager. Artifactory offers powerful enterprise features and fine-grained permission control behind a sleek and easy-to-use UI. Artifactory acts as a proxy between your build tool (Maven, Ant, Ivy, Gradle etc.) and the outside world.
Handle thousands of packages with lightning-fast performance and reliable uptime. Flexible plans start free, with no credit card required.

The world's only repository manager with FREE support for popular formats.




Lightweight multi-protocol artifact registry. Single binary, zero dependencies. Supports Docker, Maven, npm, PyPI, Cargo, Go, Helm OCI, and raw files.
Create, host, and share packages with your team, and add artifacts to your CI/CD pipelines with a single click.


AWS CodeArtifact is a fully managed artifact repository service that aims to make it easy for organizations of any size to securely store, publish, and share software packages used in their software development process.

Vulert notifies you if a SECURITY ISSUE is found in any of the open-source software you use. No installation needed.




Cloudsmith is your friendly neighbourhood package management SaaS (fully managed), packed with Enterprise-grade features to manage and accelerate secure delivery of your software.




Consistency, continuity, compliance – all in one centralized universal package manager with ProGet. ProGet servers as the organization central repository, allowing the enterprise to store all your important asset in one place.
Mend.io offers the first AI native application security platform, purpose-built to secure AI-generated code and embedded AI components. Our unified platform enables companies to manage application risk effectively in modern software development.


