No more typing reviews! Try our Samantha, our new voice AI agent.
Sonatype Repository Firewall Logo

Sonatype Repository Firewall pros and cons

Vendor: Sonatype
3.9 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Sonatype Repository Firewall's network and intrusion protection features are valuable.
Nexus Firewall has significantly improved the time it takes to release secure apps to market.
Sonatype stands out in their field as a leader.
Sonatype Repository Firewall notifies users if a downloaded component becomes vulnerable.
Buying Sonatype is worthwhile due to the value added by time and security requirements.

CONS

File systems need improvement, including missing features like zero test and container support.
There are false positives that block safe components, causing delays.
Sonatype Repository Firewall pricing is considered high, with some components being very expensive.
Lack of a support call option and professional services package is noted as an issue.
Alternative AI tools are seen as more cost-effective for detecting vulnerabilities.
 

Sonatype Repository Firewall Pros review quotes

Amal Alshehri - PeerSpot reviewer
Lead Cybersecurity Analyst at Saudi Aramco
Jul 16, 2026
Buying Sonatype is eventually worth it because time definitely has great value, and security is a requirement as well.
GauravS08 - PeerSpot reviewer
Cloud ARchitect at a tech vendor with 10,001+ employees
Apr 28, 2026
Since I started using Sonatype Repository Firewall more than five years ago, it has had a positive impact on security and development speed.
Amal Alshehri - PeerSpot reviewer
Lead Cybersecurity Analyst at Saudi Aramco
Jul 2, 2026
Sonatype is pretty much a leader and stands out in their field.
Learn what your peers think about Sonatype Repository Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,800 professionals have used our research since 2012.
Angelo Quaglia - PeerSpot reviewer
Independent Professional at Studio Dott. Ing. Angelo Quaglia
Jul 24, 2026
Sonatype Repository Firewall's best features include timely reporting of vulnerable dependencies in the software we write, which is one reason why my organization chooses it.
JK
CEO at VIVANS
Jan 20, 2025
The firewall is the only solution that supports Nexus Repository.
Ashish Shukla - PeerSpot reviewer
Global Treasurer at Genpact
Apr 11, 2022
You will get clean code every time, and that's a great achievement.
reviewer1534461 - PeerSpot reviewer
Senior Cyber Security Architect and Engineer at a computer software company with 10,001+ employees
Mar 18, 2021
Another thing that I like about Sonatype is that if you download something today, and five days from today it becomes vulnerable, it will notify you.
reviewer2163405 - PeerSpot reviewer
Student at a university with 51-200 employees
Apr 24, 2023
The product's network and intrusion protection features are valuable. It also has rules and compliance features for security.
 

Sonatype Repository Firewall Cons review quotes

Amal Alshehri - PeerSpot reviewer
Lead Cybersecurity Analyst at Saudi Aramco
Jul 16, 2026
From what I heard, some components such as Sonatype Repository Firewall are very expensive.
GauravS08 - PeerSpot reviewer
Cloud ARchitect at a tech vendor with 10,001+ employees
Apr 28, 2026
I have noticed some false positives where safe components get blocked, causing unnecessary delays for developers.
Amal Alshehri - PeerSpot reviewer
Lead Cybersecurity Analyst at Saudi Aramco
Jul 2, 2026
I think the price for the product is on the high side, as some components are very expensive, such as Sonatype Repository Firewall.
Learn what your peers think about Sonatype Repository Firewall. Get advice and tips from experienced pros sharing their opinions. Updated: July 2026.
908,800 professionals have used our research since 2012.
Angelo Quaglia - PeerSpot reviewer
Independent Professional at Studio Dott. Ing. Angelo Quaglia
Jul 24, 2026
I see less and less benefit from using Sonatype Repository Firewall despite its elevated cost because with artificial intelligence built into our development environments like Kiro, for example, we can detect vulnerabilities in other ways, in a cheaper way, and not even waiting for the pipeline to run.
JK
CEO at VIVANS
Jan 20, 2025
There are several features lacking in the current offering, particularly concerning container support and AI packages, like humming phase support.
Ashish Shukla - PeerSpot reviewer
Global Treasurer at Genpact
Apr 11, 2022
I think we posted one or two queries on the development side, but the response was not that great.
reviewer1534461 - PeerSpot reviewer
Senior Cyber Security Architect and Engineer at a computer software company with 10,001+ employees
Mar 18, 2021
What I don't like is the lack of an option to pick up the phone and call someone for support. That is something they need to improve on. They need to have a professional services package, or they need to include that option with their services.
reviewer2163405 - PeerSpot reviewer
Student at a university with 51-200 employees
Apr 24, 2023
The tool needs to improve its file systems. The product should also include zero test feature.