Sonatype

sonatype.com

We have not found a subprocessor list published by Sonatype. We monitor 6 of its documents, which we last checked on Nov 11, 2026.

Subprocessors

None extracted.

Web TechnologiesCSV of Sonatype's web technologies · Atom feed of Sonatype's web technologies

Sonatype's homepage made 362 requests to 35 domains, 17 services controlled by another company, and 3 domains not identified.

Advertising (5): Google Cloud, The Trade Desk, Inc., Reddit, Inc.; usually detected as Advertising: Xandr, Magnite, Inc.Analytics (3): HubSpot, Wingify, LinkedInMarketing automation (2): 6Sense Insights, Inc.; usually detected as Marketing automation: AdobeLive chat (1): Qualified.com, Inc.Cookie compliance (1): OsanoOther (5): Customer data platform: RudderStack; Documentation: TechTarget, Inc.; usually detected as Issue trackers: Sentry; JavaScript libraries: Cloudflare; Widgets: Navattic

17 third parties by category: Advertising 5Analytics 3Marketing automation 2Live chat 1Cookie compliance 1Other 5

Third parties 17 · 177 requests
HubSpot HubSpot Analytics 22% of the page's requests 79
Qualified.com, Inc. Qualified 7% of the page's requests 24
Google Cloud DoubleClick Floodlight Google Analytics Google Tag Manager 4% of the page's requests 13
Wingify VWO 3% of the page's requests 12
6Sense Insights, Inc. 6sense 3% of the page's requests 11
The Trade Desk, Inc. theTradeDesk 2% of the page's requests 8
Adobe typekit.net 2% of the page's requests 6
LinkedIn Linkedin Insight Tag 1% of the page's requests 4
Navattic Navattic 1% of the page's requests 4
Cloudflare Cloudflare Browser Insights cdnjs jQuery 3.6.0 jQuery Migrate 3.3.2 <1% of the page's requests 3
Reddit, Inc. Reddit Ads <1% of the page's requests 3
Xandr adnxs.com <1% of the page's requests 3
Osano Osano <1% of the page's requests 2
TechTarget, Inc. TechTarget <1% of the page's requests 2
Magnite, Inc. rubiconproject.com <1% of the page's requests 1
RudderStack Rudderstack <1% of the page's requests 1
Sentry sentry.io <1% of the page's requests 1
Unknown 3 · 4 requests

revsure.cloud4u5psrpmhi.execute-api.us-east-1.amazonaws.comdytzfsedsvijt.cloudfront.net

First party 1 · 181 requests
Sonatype Adobe Fonts Cloudflare Goober HSTS HTTP/3 HubSpot CMS Hub Open Graph Priority Hints Sentry Swiper Typekit lit-html 2.8.0 50% of the page's requests 181

10 tracked companies loaded by the homepage are not in Sonatype's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV of Sonatype's compliance · Atom feed of Sonatype's compliance

Certified
Says it complies with

Certifications as Sonatype's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV of Sonatype's security record · Atom feed of Sonatype's security record

What public security catalogs list for Sonatype, in their words.

Known exploited vulnerabilities

2 vulnerabilities in Sonatype's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2019-7238Nexus Repository ManagerSonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVE-2020-10199Nexus RepositorySonatype Nexus Repository Remote Code Execution Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Service statusCSV of Sonatype's status page incidents · Atom feed of Sonatype's status page incidents

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: 1 incident (1 minor)Sep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 1 incident in 90 days
  • 0 major or critical
  • 11 min typical time to resolve
BeganIncidentImpactLasted
Increased Response Times for Application Evaluationsminor11 min

Incidents per month

0 2 4 Dec 2025: 0 incidents Jan 2026: 0 incidents Feb 2026: 0 incidents Mar 2026: 0 incidents Apr 2026: 0 incidents May 2026: 0 incidents Jun 2026: 0 incidents Jul 2026: 0 incidents Aug 2026: 0 incidents Sep 2026: 1 incident (1 minor) · typical time to resolve 11 min Oct 2026: 0 incidents Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidentsBar
Data Services1

As Sonatype's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

ChangesCSV of Sonatype's changes · Atom feed of Sonatype's changes

None since tracking began.

Rating badge for Sonatype's site

Sonatype transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sonatype"><img src="https://thirdpartyindex.com/badge/sonatype.svg" alt="Sonatype transparency rating on Third Party Index" height="20"></a>
[![Sonatype transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sonatype.svg)](https://thirdpartyindex.com/vendors/sonatype)