Overview of Nexus IQ
Nexus IQ is a software composition analysis (SCA) tool that helps teams identify security vulnerabilities, licence risks, and policy violations in open-source dependencies used in applications.
Nexus IQ analyses components used in application builds and provides insights into security, licensing, and quality risks associated with those components.
Key features and benefits
| Feature | Description |
|---|---|
| Vulnerability detection | Identifies security vulnerabilities in open-source libraries. |
| Licence risk analysis | Detects licensing obligations and potential legal risks. |
| Policy enforcement | Enforces security and compliance policies during builds. |
| Continuous monitoring | Tracks vulnerabilities and component risks across applications. |
| CI/CD integration | Integrates with build tools and CI/CD pipelines to evaluate components automatically. |
Use cases
Nexus IQ in SHIP-HATS can be used to:
- Detect vulnerable open-source dependencies in applications.
- Enforce organisation security and compliance policies.
- Monitor licence risks across software components.
- Prevent insecure dependencies from entering production builds.
Pricing
Public officers can view the pricing for Sonatype (Nexus Repository and Nexus IQ) at SHIP-HATS pricing using their non-SE GSIB or COMET device.
