Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 348 products, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
18Identity & Access Management
16 shown
If one engineer's identity were phished today, what could the attacker reach — and would MFA, least privilege or detection stop them?
Who maintains it
- Foundation0
- Community0
- Company16
Freemium
4 here
Commercial
12 here
- Bps269BeyondTrust Password Safe2 capabilities
- Cfi270CrowdStrike Falcon Identity Protection3 capabilities
- Cpa271CyberArk Privileged Access Manager2 capabilities
- Dss272Delinea Secret Server2 capabilities
- Mdi273Microsoft Defender for Identity3 capabilities
- Men274Microsoft Entra ID Governance2 capabilities
- Owi275Okta Workforce Identity5 capabilities
- Pin276PingOne3 capabilities
- Sis277SailPoint Identity Security Cloud2 capabilities
- Sil278Silverfort3 capabilities
- Str279StrongDM2 capabilities
- Yub280YubiKey3 capabilities
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 618 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.