Inseong Digital unveils Sonatype Nexus One at AIS 2026
The platform covers open source risk from intake to deployment and includes controls for dependencies chosen by AI coding tools, according to dailysecu.com.
Inseong Digital introduced Sonatype's software supply chain security and governance platform, Nexus One, at AIS 2026, the company announced at the conference held on November 3 in Seoul. The event was hosted by dailysecu.com with support from KISA and KISIA and drew about 700 security staff and industry attendees.
The presentation covered managing security risk across the open source component lifecycle, from intake through development, build and deployment. It also addressed control of the software dependencies used by AI coding tools.
Components of the platform
Repository Firewall automatically quarantines and blocks malicious or suspicious open source components before they reach the internal repository. Nexus Repository centrally manages packages, containers, binaries and artifacts used by developers, CI/CD pipelines and AI agents. Lifecycle analyzes open source vulnerabilities and license risk in real time and automatically proposes a policy-compliant "Golden Version".
Sonatype Guide, an SCA solution, uses MCP server integration to help AI coding assistants select safe dependencies from the coding stage. SBOM Manager supports SBOM creation and management based on the CycloneDX and SPDX standards and uses VEX for vulnerability exploitability information.
Inseong Digital said it plans to expand adoption of the platform mainly in the financial and public sectors.
Quick answers
What is Nexus One?
It is Sonatype's software supply chain security and governance platform, which Inseong Digital presented at AIS 2026.
Where was Nexus One presented?
At AIS 2026, held on November 3 in Seoul and hosted by dailysecu.com with support from KISA and KISIA.
Which sectors will Inseong Digital target?
The company plans to expand adoption mainly in the financial and public sectors.