Is sonatype.org safe?
Review sonatype.org security risks.

The following security profile for sonatype.org includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.

All Security Profiles

sonatype.org Organization Details

Headquarters

Hosting

Hosting locations

Security Program

Security Certifications

PCI Compliant

HIPAA Compliant

SOC 2 Compliant

GDPR Compliant

ISO 27001 Compliant

FedRamp Compliant

CSA Star Level 1
Compliant

Security Page

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

Privacy Policy

Status Page

Authentication

Authentication / SSO

Supported Okta Features

Supports SSO

Two-factor authentication via SMS

Two-factor authentication via E-mail

Two-factor authentication via Hardware

Two-factor authentication via Software

Two-factor authentication via TOTP

Two-factor authentication via U2F

OAuth Details

sonatype.org Supply Chain

Amazon Web Services (AWS)
Google Workspace
SendGrid
Google Analytics

sonatype.org Subdomains

prod.ossindex.sonatype.org
central.sonatype.org
issues.sonatype.org
repository.sonatype.org
osgi.sonatype.org
central-stage.sonatype.org
ossindex-stage.sonatype.org
repository-aws.sonatype.org
issues-test.sonatype.org
stage.ossindex.sonatype.org
www.sonatype.org
docs.sonatype.org
goalie-dev.sonatype.org
ossindex-prod.sonatype.org
central-beta.sonatype.org
maven-java-net.sonatype.org

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free