Repository Firewall Pro

Sonatype Repository Firewall Pro ( https://firewall.sonatype.app) is a cloud-based service that protects your software supply chain by blocking malicious open-source packages before they reach your artifact repository.

Firewall Pro sits between your repository manager and the public internet. When a developer or CI pipeline requests a package, Firewall Pro evaluates it against Sonatype Research threat intelligence and blocks any package identified as potentially malicious — before it is cached or served by your repository manager.

No additional software needs to be installed. You configure your existing repository manager proxy repositories to route traffic through Firewall Pro.

Key Capabilities

Sonatype Repository Pro provides the following key capabilities:

• Blocks packages identified by Sonatype Research as potentially containing malicious code; this can include credential harvesters, backdoors, code injectors, and typosquatting attacks
• Protects npm, PyPI, NuGet, and Maven package ecosystems
• Provides a real-time view of active malware detected across monitored ecosystems
• Requires no software installation or infrastructure management

Sonatype's Original Repository Firewall vs. Firewall Pro

While Repository Firewall and Repository Firewall Pro may share a name, they do not share a codebase. The original Repository Firewall is Sonatype's most robust, fully-featured solution for protecting your repositories and controlling the open-source components allowed into your Software Development Lifecycle.

Firewall Pro is a light-weight, SaaS-only solution appropriate for leveraging Sonatype's intelligence to protect to your non-Sonatype repository manager. With Firewall Pro, a component is either allowed or blocked; there is no quarantine or review state as in Sonatype's original Firewall solution.

The table below provides a breakdown of some of the differences and similarities between the original Repository Firewall and new Firewall Pro: