Skip to content
RockPointCyber

Periodic Table

The software supply chain, laid out so position means something.

Twenty-five domains, 236 controls, laid out in the order the chain runs. Open one to see its controls arranged by the program maturity each demands, how much of the modeled threat it closes, and who actually sells it.

Table

CapabilitiesProducts
← All 25 domains

19Vendor Governance

5 of 7 shown

For each supplier and integration with access to our code, pipeline or data, do we have current evidence of their security and a plan if they are compromised?

Phase

AnyPlanCodeBuildTestReleaseDeployOperateMonitor

Type

AnyPreventiveDetectiveCorrectiveResponsiveVisibilityGovernance

Up to

Any levelLevel 1Level 2Level 3Level 4

Color

Attacks counteredFramework controlsMaturity levelProducts availableAutomation potentialImplementation effort

Attacks counteredlow to high

  • Counters none2
  • Counters 1–22
  • Counters 3–51
  • Counters 6+0
  • Table stakes1

Level 1

1 here

Level 2

1 here

Level 3

3 here

How this was produced

Every figure above was read from the Gantry knowledge graph, version 7.1.0, and computed when you opened this page — in 284 ms on 2026-10-27. Nothing here is a cached verdict or a dataset assembled for marketing: it is the same model our engagements run on.