Announcing the NeuVector & Sonatype Nexus Lifecycle Integration: Securing Containers Across the SDLC

It’s no secret that container usage has increased rapidly in the last few years. As reported in our 2020 State of the Software Supply Chain Report, “Pulls of container images topped 8 billion for the month of January. This means annualized image pulls from the repository should top 96 billion ... Read More

New Language? No Problem. New Ecosystems in Nexus Lifecycle and Nexus Firewall

A few months ago we announced some exciting ecosystem updates to Nexus Lifecycle. Today, I’m happy to expand upon that with the news of even more ecosystem coverage added to Nexus Lifecycle, as well as some new additions to Nexus Firewall. These new ecosystems bring Nexus Lifecycle and Nexus Firewall ... Read More

Real Talk: What Users Really Look For in a Software Composition Analysis (SCA) Solution

A few weeks ago, we wrote about the differences in SCA and SAST tools. While you can’t really compare the two, for most organizations, software composition analysis (SCA) is likely the best place to start. We also mentioned if you do choose to invest in SCA, you should select a ... Read More

Your Guide to AppSec Tools: SAST or SCA?

The application security market is saturated with tools like DAST, SAST, IAST, and RASP - which can be overwhelming. Each of these tools play a specific security role within the SDLC, but are they really representative of AppSec risk or just different flavors of traditional methodologies? When it comes to ... Read More

We Speak Your Language – New Ecosystems Available in Nexus Lifecycle

There are more than 700+ programming languages to choose from and different languages gain popularity and momentum at any time. In fact, since 2012 there has been a new “favorite” programming language each year. This highlights the dynamic nature of the development landscape and the necessity for the community to ... Read More

Secure Guardrails