Try our new research platform with insights from 80,000+ expert users

Cortex Cloud by Palo Alto Networks vs Sonatype Lifecycle comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex Cloud by Palo Alto N...
Ranking in Software Supply Chain Security
38th
Average Rating
0.0
Reviews Sentiment
8.7
Number of Reviews
0
Ranking in other categories
Vulnerability Management (73rd), Cloud Workload Protection Platforms (CWPP) (32nd), Cloud Security Posture Management (CSPM) (36th), Cloud-Native Application Protection Platforms (CNAPP) (26th), Data Security Posture Management (DSPM) (27th), Cloud Infrastructure Entitlement Management (CIEM) (15th), Application Security Posture Management (ASPM) (21st), Cloud Detection and Response (CDR) (12th)
Sonatype Lifecycle
Ranking in Software Supply Chain Security
3rd
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
45
Ranking in other categories
Application Security Tools (6th), Software Composition Analysis (SCA) (4th)
 

Featured Reviews

Use Cortex Cloud by Palo Alto Networks?
Share your opinion
SrinathKuppannan2 - PeerSpot reviewer
Easily identifies problematic versions and ensures adherence to regulatory standards like HIPAA, critical for industries dealing with sensitive information
While Sonatype Lifecycle effectively manages artifacts in Nexus Repository and performs code firewall checks based on rules, it has the potential to expand further. I am looking forward to additional features similar to SonarQube, especially since licenses are often split per component. SonarType could integrate cloud-based capabilities, addressing the increasing shift towards cloud workloads. While there have been demos and discussions around this, significant progress on scanning and analyzing cloud images remains to be seen. I am looking forward to Sonatype incorporating these enhancements, particularly in regard to cloud-based features. On-prem workloads are getting to the cloud workloads. * I would like to see more cloud-related insights, such as logging capabilities for the images we use and image scanning information. * Additionally, it would be beneficial to have insights into the stages of dependencies and ensure they comply with standards. If there are any violations in respect to CVSS reports, * Integrating CVSS (Common Vulnerability Scoring System) report rules into the Lifecycle module to detect and report violations would be valuable. I am hoping to see these enhancements from Sonatype in the future. On the security side, I think there's a lot of development needed. There are many security tools on the market, like open-source ones, that Sonatype doesn't integrate with.
report
Use our free recommendation engine to learn which Software Supply Chain Security solutions are best for your needs.
859,957 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
14%
Performing Arts
12%
Computer Software Company
12%
Financial Services Firm
8%
Financial Services Firm
33%
Computer Software Company
12%
Manufacturing Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
How does Sonatype Nexus Lifecycle compare with SonarQube?
We like the data that Sonatype Nexus Lifecycle consistently delivers. This solution helps us in fixing and understanding the issues a lot quicker. The policy engine allows you to set up different t...
What do you like most about Sonatype Nexus Lifecycle?
Fortify integrates with various development environments and tools, such as IDEs (Integrated Development Environments) and CI/CD pipelines.
What is your experience regarding pricing and costs for Sonatype Nexus Lifecycle?
According to my calculations, if you are working with up to 200 developers, Sonatype is cheaper than JFrog. However, for larger numbers like our case with 1,000 user licenses, JFrog becomes much mo...
 

Also Known As

No data available
Sonatype Nexus Lifecycle, Nexus Lifecycle
 

Overview

 

Sample Customers

Information Not Available
Genome.One, Blackboard, Crediterform, Crosskey, Intuit, Progress Software, Qualys, Liberty Mutual Insurance
Find out what your peers are saying about Mend.io, JFrog, Sonatype and others in Software Supply Chain Security. Updated: June 2025.
859,957 professionals have used our research since 2012.