Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 348 products, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
20Detection & Response
12 shown
If a dependency, action or maintainer account we rely on were compromised tonight, how quickly would we know, and have we rehearsed exactly what to do?
Who maintains it
- Foundation0
- Community1
- Company11
Open Source
2 here
Commercial
8 here
- Cfal297CrowdStrike Falcon Complete5 capabilities
- Cfn298CrowdStrike Falcon Next-Gen SIEM4 capabilities
- Gso299Google Security Operations5 capabilities
- Mde300Microsoft Defender Experts for XDR2 capabilities
- Mdx301Microsoft Defender XDR4 capabilities
- Mse302Microsoft Sentinel7 capabilities
- Pa303Panther3 capabilities
- Ses304Splunk Enterprise Security6 capabilities
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 209 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.