Gartner recognizes Sonatype as key vendor for software supply chain security and software composition analysis
May 23, 2023 -- Fulton, Md. -- Sonatype, the pioneer of software supply chain management, today announced it has been named to the 2023 Gartner Magic Quadrant for Application Security Testing for the first time. Gartner recognized Sonatype in the report as a Niche Player for its Ability to Execute and Completeness of Vision.
Sonatype’s industry-leading software supply chain management platform empowers developers and security leaders with complete visibility and insight into the millions of open source components that flow through their enterprise software supply chains every day. More than 2,000 organizations, including 70% of the Fortune 100, and 15 million software developers rely on Sonatype to help them deliver and maintain exceptional, secure software.
“Sonatype was founded with the mission to rethink how we secure our software supply chain, and our recognition in the Gartner Magic Quadrant speaks to our continued growth and momentum within the industry,” said Alex Berry, President at Sonatype. “As companies face an increasingly complex and dangerous security landscape, frictionless risk management is at the forefront of every developer and security professional’s mind. We are focused on developing solutions that help companies innovate faster, safer and securely at scale.”
Sonatype’s software supply chain management capabilities are unparalleled. Sonatype researchers have analyzed more than 120 million open source components – 40x more than its competitors – and the Sonatype platform has automatically blocked over 115,000 malicious components from attacking software development pipelines. This high quality, in-depth intelligence means business leaders using Sonatype can drive faster innovation, and developers can build products with confidence that their code and applications are secure.
“We are thrilled that Gartner has recognized the increased role of software composition analysis (SCA) and software supply chain management within the application security testing (AST) space, and that Sonatype is among other named vendors recognized for their AST solutions in the Magic Quadrant,” said Mitchell Johnson, Chief Product Development Officer at Sonatype. “We believe security should be an organic part of the software development lifecycle and is what we’ve been working toward enabling since our founding.”
To download a complimentary copy of the full 2023 Gartner Magic Quadrant Report, visit: https://www.sonatype.com/resources/white-paper-2023-gartner-magic-quadrant
To learn more about application security and software supply chain management from Sonatype, please visit: https://www.sonatype.com/products/software-supply-chain-management
Source: Gartner, Magic Quadrant for Application Security Testing, Dale Gardner, Mark Horvath, Manjunath Bhat, Ravisha Chugh, Angela Zhao, 17 May 2023
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and MAGIC QUADRANT is a registered trademark of Gartner, Inc. and/or its affiliates and are used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product or service depicted in our research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
About Sonatype
Sonatype is the software supply chain management company. We enable organizations to innovate faster in a highly competitive market. We allow engineers to develop software fearlessly and focus on building products that power businesses. Sonatype researchers have analyzed more than 120 million open source components – 40x more than its competitors - and the Sonatype platform has automatically blocked over 115,000 malicious malware components from entering developers’ code. Enabling high-quality, secure software helps organizations meet their business needs and those of their customers and partners. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on our tools and guidance to be ambitious, move fast and do it securely. To learn more about Sonatype, please visit www.sonatype.com.