Modern software application development has evolved from deploying products periodically to build them on a daily or...
Software Advice offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.
Learn more
About Nexus Lifecycle
Nexus Lifecycle by Sonatype helps developers streamline open-source governance operations and scan and fix issues in the software development process via a unified portal. The platform enables security professionals to establish custom security, licenses and architectural policies to ensure best practice across the entire software development lifecycle (SDLC).
Nexus Lifecycle allows organizations to access a centralized vulnerability database to detect and avoid online attacks and monitor security compliance in the development process. Supervisors can gain insights into the utilization of various software and dependencies and ensure compliance with guidelines via automated software bill of material (SBOM). Additionally, managers can view and track remediation time, violation trends, mean time to resolution (MTTR), and other data via graphs and analytics.
Nexus Lifecycle also supports integration with numerous third-party systems like ThreadFix, OpenShift, Eclipse, Maven and more. Pricing includes annual subscriptions and support is extended via phone, email and other online measures.
Nexus Lifecycle pricing
Nexus Lifecycle has a free version and offers a free trial. Nexus Lifecycle paid version starts at US$775.00/year.
Starting Price:
US$775.00/year
Free Version:
Yes
Free trial:
Yes
Alternatives to Nexus Lifecycle
GitHub is a project management and code sharing platform that allows users to share their codes with others and...
GuardRails is a security platform that empowers developers to build secure applications by giving them continuous...
Vulcan Cyber is a vulnerability management software designed to help businesses analyze and mitigate cyber risks. The...
Trava is a cybersecurity solution, which enables investors, managed service providers and businesses to identify...
Jira Software is a business process management tool used by agile teams to plan, track and release software. Jira...
Nexus Lifecycle Reviews for UK Users
Feature rating
4 reviews of 4
Basile
- Industry: Computer Software
- Company size: 2–10 Employees
- Used Weekly for 1+ year
-
Review Source
4
Reviewed on 16/09/2022
vulnerability analysis tool
my experience with Nexus Lifecycle is that it allows me to identify and secure vulnerable devices when doing development, which really allows me to work with peace of mind and confidence
Pros
Firstly, what is good about Nexus Lifecycle is that it is easy to install and use, it supports several types of packages, has very good documentation and is available in several languages.
secondly, the vulnerability feature is excellent when it comes to application vulnerability analysis
Cons
First of all, Nexus Lifecycle is more expensive than its competitors, so access to the paid version is not available to everyone,
Then, its interface is often heavy when adding several components
Alternatives Considered
GitHubReasons for Switching to Nexus Lifecycle
because of its ease of use and its ability to detect application vulnerabilities
Gil
- Industry: Electrical/Electronic Manufacturing
- Company size: 5,001–10,000 Employees
- Used Daily for Free Trial
-
Review Source
4
Reviewed on 23/04/2020
Binary Repository for the large enterprise
It's fairly easy to install, pricy from the enterprise version, supports all packages types.
Pros
The Open Source version has enough functionality (comparing to competitors) to be one of the best in its field. It has vast support for all packages type and the installation is fairly easy
Cons
The issue will begin once you like to move from the Open Source version to the commercial one, it is pricy (again comparing to the competitors) it has a business module of per user per year cost and if your budget is limited you would find yourself with an issue of funding it. It is not the best in line with the enterprise versions out there.
Alternatives Considered
ArtifactoryReasons for Choosing Nexus Lifecycle
The Open Source version of Nexus repository has much more functionality (for the free option), might return back if we decide to go for the enterprise version.Switched From
Artifactory
Verified Reviewer
- Industry: Computer Software
- Company size: 501–1,000 Employees
- Used Daily for Free Trial
-
Review Source
4
Reviewed on 18/08/2022
Automatic vulnerability detection and mitigation tool in software development process
I primarily used the tool to detect supply chain vulnerability to mitigate attacks for the development team.
Pros
Easier to install, and use and helping our team in mitigating supply chain attacks.
Cons
It has a high per-year basis subscription and is not up to the mark with the other competitor with similar costs
Reasons for Choosing Nexus Lifecycle
Only feasible for large-scale IT organizationsReasons for Switching to Nexus Lifecycle
It detects updated open source software vulnerabilities in the source code and fixes them instantly. Feasible for small organizations as well.
Verified Reviewer
- Industry: Biotechnology
- Company size: 51–200 Employees
- Used for 1-5 months
-
Review Source
4
Reviewed on 04/05/2018
Powerful artifact manager, but has some rough edges
Pros
Supports all major artifact types, such as npm, helm, docker, etc. Powerful integrations with major 3rd party tools.
Cons
Open source version does not allow integrating with non-Maven deployment types, making it difficult to evaluate even for those preparing to use enterprise version.
