57 Sonatype Testimonials

"We are dealing with patient data and healthcare data. Security comes above everything. The fact that we can trace vulnerabilities and their dependencies with Nexus Lifecycle alleviates this from our list of things do."

"We narrowed down our trials to Sonatype Nexus and JFrog Artifactory. We decided to go with Nexus because the OSS version seemed to deliver most of what we were looking for."

“Sonatype's renowned data quality proved to be precisely what they needed to significantly enhance the accuracy of their security violations.”

"Nexus helped reduce local setup, since there is only one repository location to point to for external dependencies. This also helped increase the download speed of those dependencies."

"Nexus should be a must. Once you embrace it, you won't want to go back."

"Nexus has given us a solid repository for our artifact storage and is our ultimate source of truth for the available versions of our own internal application wars and jars. We're very happy with the LDAP integration, REST API, and I recommend it."

"Nexus helped to reduce our costs for dependency management. We saw a much lower failer rate caused by using wrong artifacts and saw much faster builds due to the proxy cache."

“Sonatype specializes in streamlining component-based development, so the quality is much higher than any other solution we evaluated and far better than manual effort.”

"Everyone who saw Nexus Lifecycle said, ‘This is something we can work with. This is the tool that works for us."

"With Lifecycle, we can help programmers make the right decisions and make their software more secure. That's why we chose Nexus Lifecycle."

"We’ve had a single Nexus instance standing up for two years. The maintenance and support effort is zero because everything just works."

“Through the use of Nexus Lifecycle, our team can proactively ensure open source security vulnerabilities are precisely identified, managed and resolved before they can impact our customers.”

"The biggest advantage of using IQ Server is to be able to report to our project team what specific libraries are used within our applications. We have immediate visibility into security issues."

"We needed constant monitoring and notifications of open source vulnerabilities in our applications. That’s what Nexus Repository, Nexus Lifecycle and IQ Server delivered."

"By layering automation and instrumentation through our pipelines we were able to reduce the average time for new applications from 25 days to 2.5 days, with the record of 8 minutes from desktop to cloud."