Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 236 controls, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
13Infrastructure-as-Code Security
6 of 7 shown
Is every infrastructure change reviewed against security policy as code before it is applied, and do we detect changes made outside of code?
Attacks counteredlow to high
- Counters none3
- Counters 1–23
- Counters 3–50
- Counters 6+0
Level 2
2 here
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 602 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.