Periodic Table
The software supply chain, laid out so position means something.
Twenty-five domains, 348 products, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.
Table
← All 25 domains
19Vendor Governance
12 shown
For each supplier and integration with access to our code, pipeline or data, do we have current evidence of their security and a plan if they are compromised?
Who maintains it
- Foundation0
- Community0
- Company12
Freemium
1 here
Commercial
11 here
- App285AppOmni3 capabilities
- Btp286Bitsight Third-Party Risk Management3 capabilities
- Bdb287Black Duck Binary Analysis2 capabilities
- Fsp288Finite State Platform4 capabilities
- Nt289NetRise Trace2 capabilities
- Otp290OneTrust Third-Party Management3 capabilities
- Pan291Panorays3 capabilities
- Ptp292ProcessUnity Third-Party Risk Management2 capabilities
- Rsa293ReversingLabs Spectra Assure5 capabilities
- Upg294UpGuard2 capabilities
- Whi295Whistic2 capabilities
How this was produced
Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 491 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.