Software Assurance Guardian (SAG) by Reliable Energy Analytics is a software supply chain risk assessment and management solution. It implements a patented 7-step process to evaluate software objects for cyber risks, including CISA Known Exploited Vulnerabilities (KEVs), before installation in production environments. SAG calculates a SAGScore indicating the trustworthiness level of software based on multiple risk factors. The product aims to help organizations comply with cybersecurity regulations and protect against supply chain attacks.