Nexus Repository Tiers and Feature Availability
Sonatype Nexus Repository acts as the single source of truth and central control point for open source packages, build artifacts, container images, and AI/ML model dependencies across your software supply chain.Nexus Repository is available in three commercial editions designed to match the scale, governance requirements, and operational resilience of development teams:
Free Tier (Community Edition): Free, self-hosted artifact management for individual developers and small teams.
Pro: Enterprise-grade availability, identity management, and storage resilience for mission-critical CI/CD pipelines.
Pro+: Comprehensive software supply chain intake governance, including automated malware quarantine, license policy enforcement, and AI/MCP dependency controls.
Feature Comparison
The following table details feature availability across Nexus Repository editions:
Capability / Area | Free Tier (Community Edition) | Pro Tier | Pro+ Tier |
|---|---|---|---|
Deployment Model | Self-Hosted only | Cloud (SaaS), SAGE, Self-Hosted | Cloud (SaaS), SAGE, Self-Hosted |
Operational Limits | 40,000 components 100,000 requests per day | N/A | N/A |
Pricing Model | Free | Usage-based | Usage-based |
High Availability (HA) and Clustering | N/A | Available | Available |
SAML 2.0 / OIDC and Single Sign-On | N/A | Available | Available |
Cloud Blob Storage (AWS S3, Azure, GCS) | N/A | Available | Available |
Disaster Recovery Replication | N/A | Available | Available |
Accidental Deletion Rollback | N/A | Available | Available |
FIPS 140-2 Compliance Support | N/A | Available | Available |
Automated Malware Quarantine (Known and Zero-Day) | N/A | N/A | Available |
Intake Security and Policy Gates (Age, CVSS, Risk) | N/A | N/A | Available |
License Compliance and Legal Guardrails | N/A | N/A | Available |
AI Agent and MCP Dependency Control | N/A | N/A | Available |
Nexus Repository Pro+ includes a Repository Firewall entitlement. This entitlement includes all the Generally Available Firewall capabilities. Nexus Repository Pro can also work with Repository Firewall when the deployment has a separate Firewall entitlement.
Deployments
For self-hosted deployments, you install, operate, upgrade, and back up Nexus Repository in your environment. Self-hosted Pro and Pro+ deployments use a Nexus Repository license. Starting with 3.97.0, Pro+ subscription provides Nexus Repository and Repository Firewall entitlements. Repository Firewall runs in IQ Server. You must install IQ Server (minimum version 208) separately, connect it to Nexus Repository, and configure the repositories that Firewall protects.
For cloud deployments, Sonatype operates the Nexus Repository service and assigns the tier to your tenant. For operational differences, see Feature Parity with Sonatype Cloud.
Note
If you use a Pro+ license with a self-hosted version earlier than 3.97.0, the instance continues to operate as Nexus Repository Pro. Upgrade through a supported upgrade path.