Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 236 controls, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
09Source Control Security
9 shown
Can any single person, token or app change a protected branch, a release tag or a workflow without independent review and an audit trail?
Attacks counteredlow to high
- Counters none1
- Counters 1–25
- Counters 3–53
- Counters 6+0
- Table stakes2
Level 1
2 here
Level 2
4 here
Level 3
2 here
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 501 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.