Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 236 controls, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
07Secrets & Identity Security
11 shown
If any pipeline, repository or developer machine were fully compromised today, which long-lived credentials would the attacker get — and how fast could we revoke them?
Attacks counteredlow to high
- Counters none2
- Counters 1–26
- Counters 3–53
- Counters 6+0
- Table stakes1
Level 2
3 here
Level 3
6 here
- Ase67Automated Secret Rotation0 attacks countered
- Dsl68Dynamic Short-Lived Credentials2 attacks countered
- Lcv69Leaked Credential Validation & Revocation2 attacks countered
- Nhi70Non-Human Identity Discovery & Governance3 attacks countered
- Sdc71Secrets Detection in CI Logs & Artifacts2 attacks countered
- Wif72Workload Identity Federation3 attacks countered
Level 4
1 here
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 404 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.