Sonatype

Sonatype, the company behind Nexus Repository, sells software supply chain tooling that helps enterprises manage, secure, and govern their use of open source components and, increasingly, AI-generated code. Its newest product, Sonatype Guide, adds real-time intelligence and guardrails for AI coding assistants so they pull safe components and stay current on dependencies. Customers are large engineering organizations that need automated policy enforcement, vulnerability remediation, and visibility across millions of artifacts. Sonatype is remote-first across the US, UK, Colombia, and DC, offers flexible schedules, full parental and maternity leave, and a performance-based culture with strong leader-led coaching. For a PM, this is enterprise DevSecOps work at a mature scale, now under Vista Equity Partners ownership.