Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 348 products, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
07Secrets & Identity Security
24 shown
If any pipeline, repository or developer machine were fully compromised today, which long-lived credentials would the attacker get — and how fast could we revoke them?
Who maintains it
- Foundation4
- Community2
- Company18
Open Source
9 here
Freemium
7 here
Commercial
8 here
- Asm85AWS Secrets Manager2 capabilities
- Asec86Astrix Security3 capabilities
- Akv87Azure Key Vault3 capabilities
- Csm88CyberArk Secrets Manager3 capabilities
- Gng89GitGuardian NHI Governance2 capabilities
- Gcl90Google Cloud Secret Manager2 capabilities
- Mew91Microsoft Entra Workload ID3 capabilities
- Ons92Oasis NHI Security Cloud2 capabilities
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 185 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.