Sonatype

@UCSsfNzY9VlbCpmKLeRmwOtw - 4.5K subscribers

Modern software is assembled, rather than written. Sonatype helps developers and engineering teams build with confidence in the AI era. This is a new reality: coding assistants, open source dependencies, and vast, interconnected software supply chains now shape nearly every application shipped to production. Tune in weekly for AI coding and dependency risk insights, open source ecosystem intelligence, conversations with leaders shaping the future of open source, developer workshops, and practical guidance for assembling software safely at machine-speed. Secure at the source. Ship with confidence.

Home Videos Live Playlists

What Is Mythos? The AI That Found a 27-Year-Old Vulnerability

What Is Mythos? The AI That Found a 27-Year-Old Vulnerability Sonatype

143 views - 3 weeks ago

Exploring The True Threat of Malicious Code vs. Vulnerabilities | Open Source Open Mic, Ep. 3

Exploring The True Threat of Malicious Code vs. Vulnerabilities | Open Source Open Mic, Ep. 3 Sonatype

45 views - 1 month ago

The Axios Supply Chain Attack Explained

The Axios Supply Chain Attack Explained Sonatype

85 views - 2 months ago

Your Code is Only 5% Yours, and That's an OSS Security Problem | Open Source Open Mic, Ep. 2

Your Code is Only 5% Yours, and That's an OSS Security Problem | Open Source Open Mic, Ep. 2 Sonatype

69 views - 2 months ago

Sonatype Guide + AWS Kiro MCP Demo | Build Secure AI-Generated Code Faster

Sonatype Guide + AWS Kiro MCP Demo | Build Secure AI-Generated Code Faster Sonatype

81 views - 2 months ago

Axios Hack Explained in 90 Seconds

Axios Hack Explained in 90 Seconds Sonatype

694 views - 3 months ago

Visualize Your BOM Instantly | New Sonatype SBOM Manager Feature

Visualize Your BOM Instantly | New Sonatype SBOM Manager Feature Sonatype

149 views - 3 months ago

AI Coding + Secure Releases: Sonatype Guide MCP with Microsoft Copilot Demo

AI Coding + Secure Releases: Sonatype Guide MCP with Microsoft Copilot Demo Sonatype

64 views - 3 months ago

What is the Software Supply Chain (Really)? | Open Source Open Mic, Ep. 1

What is the Software Supply Chain (Really)? | Open Source Open Mic, Ep. 1 Sonatype

66 views - 3 months ago

CVSS 9.1 Vulnerability Shakes Java Ecosystem: What You Need to Know

CVSS 9.1 Vulnerability Shakes Java Ecosystem: What You Need to Know Sonatype

48 views - 3 months ago

A Safer Path for Open Source Registries

A Safer Path for Open Source Registries Sonatype

92 views - 6 months ago

Why Ecosystem Safety Demands Action

Why Ecosystem Safety Demands Action Sonatype

9 views - 6 months ago

Bringing MCP into Real-World Pipelines

Bringing MCP into Real-World Pipelines Sonatype

32 views - 6 months ago

Shipping Faster with MCP—Safely

Shipping Faster with MCP—Safely Sonatype

10 views - 6 months ago

A Practical Guide to MCP for Secure Delivery

A Practical Guide to MCP for Secure Delivery Sonatype

29 views - 6 months ago

Preventing Risk in AI-Enabled IDEs

Preventing Risk in AI-Enabled IDEs Sonatype

17 views - 6 months ago

A Hippocratic Oath for Software Security

A Hippocratic Oath for Software Security Sonatype

16 views - 6 months ago

Cloud-First Patterns That Developers Love

Cloud-First Patterns That Developers Love Sonatype

7 views - 6 months ago

Protecting Package Registries and Ecosystems

Protecting Package Registries and Ecosystems Sonatype

8 views - 6 months ago

Security as a Team Sport

Security as a Team Sport Sonatype

9 views - 6 months ago

Balancing Speed with Security at Scale

Balancing Speed with Security at Scale Sonatype

8 views - 6 months ago

Stopping Open Source Malware at Scale

Stopping Open Source Malware at Scale Sonatype

9 views - 6 months ago

Operating Cloud-First Without Compromise

Operating Cloud-First Without Compromise Sonatype

8 views - 6 months ago

How the Metals Industry Is Going Green — Securely and Automatically

How the Metals Industry Is Going Green — Securely and Automatically Sonatype

6 views - 6 months ago

Making AI Safe and Useful for Developers

Making AI Safe and Useful for Developers Sonatype

4 views - 6 months ago

Cloud Security for Regulated Teams

Cloud Security for Regulated Teams Sonatype

6 views - 6 months ago

Driving Secure Innovation in the Cloud

Driving Secure Innovation in the Cloud Sonatype

6 views - 6 months ago

Sonatype Guide and Claude Demo: Secure & Smarter Development

Sonatype Guide and Claude Demo: Secure & Smarter Development Sonatype

242 views - 6 months ago

What’s Next for Secure Software

What’s Next for Secure Software Sonatype

4 views - 6 months ago

What’s Next for Secure Software

What’s Next for Secure Software Sonatype

17 views - 6 months ago

A Transformation in Software Development

A Transformation in Software Development Sonatype

14 views - 6 months ago

Safe Patterns for MCP and AI Agents

Safe Patterns for MCP and AI Agents Sonatype

24 views - 6 months ago

Guiding MCP and Agentic AI in the IDE

Guiding MCP and Agentic AI in the IDE Sonatype

10 views - 6 months ago

React2Shell Uncovered: What the Critical RCE Means - And What You Must Do

React2Shell Uncovered: What the Critical RCE Means - And What You Must Do Sonatype

81 views - 6 months ago

React 2 Shell: Critical Vulnerability Hits React & Next.js – What You Need to Know

React 2 Shell: Critical Vulnerability Hits React & Next.js – What You Need to Know Sonatype

1.7K views - 7 months ago

Shai-Hulud Worm: How It Exploited Developers and Beat AI Security

Shai-Hulud Worm: How It Exploited Developers and Beat AI Security Sonatype

334 views - 7 months ago

Securing Your Supply Chain: How AI/ML Tools Like Hugging Face are Changing the Game

Securing Your Supply Chain: How AI/ML Tools Like Hugging Face are Changing the Game Sonatype

56 views - 8 months ago

SBOM Manager New Features

SBOM Manager New Features Sonatype

45 views - 8 months ago

Risks of AI generated code and malicious packages 1 1

Risks of AI generated code and malicious packages 1 1 Sonatype

27 views - 8 months ago

The Latest on npm Supply Chain Attacks: Protecting Your Software Supply Chain

The Latest on npm Supply Chain Attacks: Protecting Your Software Supply Chain Sonatype

41 views - 8 months ago

AI Fireside Chat with Forrester

AI Fireside Chat with Forrester Sonatype

19 views - 8 months ago

Mission-Ready SBOMs: AI-Powered Software Assurance

Mission-Ready SBOMs: AI-Powered Software Assurance Sonatype

27 views - 8 months ago

Secure Your Containers with Sonatype Repository Firewall

Secure Your Containers with Sonatype Repository Firewall Sonatype

114 views - 8 months ago

Open Source Malware is Rising: Key Trends & How to Stay Protected

Open Source Malware is Rising: Key Trends & How to Stay Protected Sonatype

42 views - 8 months ago

Inside the npm Malware Attack: How Chalk and Debug Were Compromised

Inside the npm Malware Attack: How Chalk and Debug Were Compromised Sonatype

255 views - 9 months ago

Manage SBOMs and Vulnerabilities with Sonatype SBOM Manager

Manage SBOMs and Vulnerabilities with Sonatype SBOM Manager Sonatype

315 views - 10 months ago

Managing Your Components with Nexus Repository

Managing Your Components with Nexus Repository Sonatype

3.1K views - 10 months ago

Protect Your Dev Pipeline with Sonatype Repository Firewall

Protect Your Dev Pipeline with Sonatype Repository Firewall Sonatype

706 views - 10 months ago

How to Manage Open Source License Compliance with Sonatype

How to Manage Open Source License Compliance with Sonatype Sonatype

50 views - 10 months ago

How to Reduce Your Security Backlog with Sonatype

How to Reduce Your Security Backlog with Sonatype Sonatype

285 views - 1 year ago

Zero-Effort Fixes with Sonatype: Secure Code Without Breaking Builds

Zero-Effort Fixes with Sonatype: Secure Code Without Breaking Builds Sonatype

165 views - 1 year ago

Accelerate Fixes with Sonatype’s Assisted Remediation

Accelerate Fixes with Sonatype’s Assisted Remediation Sonatype

108 views - 1 year ago

How to Create a Policy Waiver in Sonatype Lifecycle | Step-by-Step Tutorial

How to Create a Policy Waiver in Sonatype Lifecycle | Step-by-Step Tutorial Sonatype

327 views - 1 year ago

Streamline AI Governance with Sonatype + Hugging Face

Streamline AI Governance with Sonatype + Hugging Face Sonatype

250 views - 1 year ago

How to Create an End-of-Life Component Policy in Sonatype Lifecycle

How to Create an End-of-Life Component Policy in Sonatype Lifecycle Sonatype

284 views - 1 year ago

SBOMs: Progress, Challenges, and What’s Next

SBOMs: Progress, Challenges, and What’s Next Sonatype

4.1K views - 1 year ago

Improving Open Source Security Starts with SBOMs

Improving Open Source Security Starts with SBOMs Sonatype

35 views - 1 year ago

The Global Impact of EU Cybersecurity Regulations

The Global Impact of EU Cybersecurity Regulations Sonatype

41 views - 1 year ago

Efficiency Through Secure Software Supply Chains

Efficiency Through Secure Software Supply Chains Sonatype

17K views - 1 year ago

10 Years of Software Supply Chain Progress

10 Years of Software Supply Chain Progress Sonatype

29 views - 1 year ago