Please ensure Javascript is enabled for purposes of website accessibility

Md. software company buys security firm, launches new data service

This screenshot of Sonatype’s Nexus Lifecycle XC service shows license and security policy threats detected by the software. (Sonatype)

This screenshot of Sonatype’s Nexus Lifecycle XC service shows license and security policy threats detected by the software. (Sonatype)

A Maryland-headquartered provider of tools to automate software supply chains has acquired a Canadian firm and launched a new data service.

Fulton-based Sonatype Inc. has acquired Vor Security of Ottawa, Ontario. Ken Duck, the founder and CEO of Vor, will work on data that underpins Sonatype’s tools.

Sonatype also on Thursday introduced Nexus Lifecycle XC, a data service delivered by the the company’s Nexus IQ server that provides information about software components in many open source ecosystems and formats including Ruby, PHP, Swift, CocoaPods, Golang, C, and C++.

Through the service, the company will provide information that combines data for machine automated open source controls with data for foundational open source governance.

 


To purchase a reprint of this article, contact reprints@thedailyrecord.com.