GitHub vs Sonatype Repository Firewall comparison

Cancel
You must select at least 2 products to compare!
GitHub Logo
2,224 views|926 comparisons
100% willing to recommend
Sonatype Logo
793 views|390 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between GitHub and Sonatype Repository Firewall based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed GitHub vs. Sonatype Repository Firewall Report (Updated: May 2024).
770,292 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable aspects of GitHub are version control and parallel development. I also appreciate the forking part, which allows us to release a specific set of features to the environment.""The product has a good UI. It's simple and easy to access, and technical help is easily available. The two-factor authentication security is another valuable feature.""The code sharing and updated history are valuable features.""The code versioning is excellent, and having a detailed log, including every change made to the code by every developer, is invaluable. It makes it so that if there is a bug or problem in the product channel, we can find exactly where it happened and how to fix it.""I would rate the stability a ten out of ten.""I find GitHub very user friendly.""The most valuable features of GitHub are the ease of integration into Microsoft Azure DevOps. The process that you need to deploy into Microsoft Azure becomes fairly simple and the templates are already available, a lot of the engineers find it easier to use.""The solution has been stable for us."

More GitHub Pros →

"The product's network and intrusion protection features are valuable. It also has rules and compliance features for security.""Another thing that I like about Sonatype is that if you download something today, and five days from today it becomes vulnerable, it will notify you."

More Sonatype Repository Firewall Pros →

Cons
"GitHub could expand the limits of the free version.""I would like to see integration with Slack such that all of the changes made in GitHub are reflected there.""There could be more integration into Azure.""There is a bit of a learning curve.""If something has to be moved into approvals, and if they don't approve it in a few hours, then they should move the approval request to some other user, or they should have a way to escalate it.""There can be conflict issues when two developers work on the same file or line of code, and it would be great to see that improved, possibly with an AI solution.""GitHub needs to improve its UI.""The security for this solution could be tightened up and improved."

More GitHub Cons →

"What I don't like is the lack of an option to pick up the phone and call someone for support. That is something they need to improve on. They need to have a professional services package, or they need to include that option with their services.""The tool needs to improve its file systems. The product should also include zero test feature."

More Sonatype Repository Firewall Cons →

Pricing and Cost Advice
  • "The private repositories are free, which is very good."
  • "It is open-source. There is no license for GitHub."
  • "The price of this solution is reasonable."
  • "If there are only 10 people using a particular repository, then GitHub is free. But if we increase the number of users, we need to pay the normal charge for GitHub."
  • "We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
  • "I haven't had to pay anything for GitHub, I use the free version."
  • "The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."
  • "The licensing model from GitHub is very clear."
  • More GitHub Pricing and Cost Advice →

  • "The pricing is reasonable if you're a large enterprise developing code. It's not super-expensive."
  • More Sonatype Repository Firewall Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    770,292 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: The control is the most valuable feature as developers can work on a single code.
    Top Answer:You don't have to pay for a license if you are using the free version. It gives you all the possible features it has.
    Top Answer:The initial setup requires heavy documentation which can be challenging for new developers.
    Top Answer:The product's network and intrusion protection features are valuable. It also has rules and compliance features for security.
    Top Answer:The licensing is quite reasonable, I believe. I do see that it adds value. It means whatever part you want to use, you can just use that part and pay for that. I think the licensing is fair enough… more »
    Top Answer:The product helps with vulnerability and security assessment. It also helps with assessment at the configuration level.
    Ranking
    Views
    2,224
    Comparisons
    926
    Reviews
    48
    Average Words per Review
    332
    Rating
    8.6
    Views
    793
    Comparisons
    390
    Reviews
    1
    Average Words per Review
    105
    Rating
    8.0
    Comparisons
    Also Known As
    Sonatype Nexus Firewall, Nexus Firewall
    Learn More
    Overview
    GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

    Sonatype Repository Firewall is a cloud-based security solution designed to safeguard your software supply chain against malicious components. It operates by meticulously scanning and evaluating each new component against customized governance policies, thereby effectively identifying and blocking potential threats before they infiltrate your development pipeline. What sets Sonatype Repository Firewall apart is its user-friendly setup, seamless integration with existing workflows, and remarkable scalability, making it suitable for software development environments of any size. Key features include blocking malicious components through behavioral analysis, malware scanning, and vulnerability assessment, as well as the ability to enforce custom governance policies. By utilizing this tool, organizations can enhance their software supply chain security, mitigate risks related to supply chain attacks, bolster compliance with industry standards, and ultimately reduce costs associated with security incidents. 

    Sample Customers
    Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
    EDF, Tomitribe, Crosskey, Blackboard, Travel audience
    Top Industries
    REVIEWERS
    Computer Software Company21%
    Financial Services Firm15%
    Government10%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Computer Software Company13%
    Manufacturing Company11%
    Financial Services Firm11%
    Government8%
    VISITORS READING REVIEWS
    Financial Services Firm33%
    Government9%
    Computer Software Company6%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business39%
    Midsize Enterprise8%
    Large Enterprise53%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise66%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise11%
    Large Enterprise75%
    Buyer's Guide
    GitHub vs. Sonatype Repository Firewall
    May 2024
    Find out what your peers are saying about GitHub vs. Sonatype Repository Firewall and other solutions. Updated: May 2024.
    770,292 professionals have used our research since 2012.

    GitHub is ranked 13th in Application Security Tools with 64 reviews while Sonatype Repository Firewall is ranked 34th in Application Security Tools with 3 reviews. GitHub is rated 8.6, while Sonatype Repository Firewall is rated 8.4. The top reviewer of GitHub writes "Beneficial version control and continuous integration, but guides would be helpful". On the other hand, the top reviewer of Sonatype Repository Firewall writes "You will get clean code every time, and that's a great achievement". GitHub is most compared with Snyk, AWS CodeCommit, Bitbucket, Atlassian SourceTree and Bitbucket Server, whereas Sonatype Repository Firewall is most compared with JFrog Xray, Cisco Secure Firewall, Black Duck, Veracode and Sonatype Lifecycle. See our GitHub vs. Sonatype Repository Firewall report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.