Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 348 products, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
21Exposure & Vulnerability Management
15 shown
Of all our open findings, do we know which few are actually exploitable in production, who owns each one, and whether last month's fixes really worked?
Who maintains it
- Foundation1
- Community0
- Company14
Open Source
1 here
Commercial
12 here
- Api309Apiiro16 capabilities
- Arm310ArmorCode5 capabilities
- Bri311Brinqa5 capabilities
- Cyc312Cycode14 capabilities
- Ef313Echo Frontier2 capabilities
- Nse314Nucleus Security5 capabilities
- Ose315OX Security5 capabilities
- Qv316Qualys VMDR4 capabilities
- Ri317Rapid7 InsightVM3 capabilities
- See318Seemplicity4 capabilities
- Sap319Snyk AppRisk4 capabilities
- Tvm320Tenable Vulnerability Management4 capabilities
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 406 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.