Supply Chain Secure by Data Theorem focuses on API, Web, and Cloud security for visibility into the entire stack. Supply Chain Secure is designed to discover all third-party assets including APIs, SDKs, open source cloud, mobile, and web services. It hacks third-party attack surfaces, automates vendor management, and ingests software bill of materials (SBOM) files to create dynamic SBOM inventory listings based on full-stack analysis. The analyzer engine discovers third-party assets across the application full-stack using runtime analysis (dynamic, interactive security testing). Supply Chain Secure allows customers to ingest all of their SBOM files to be processed by its Analyzer. The pipeline generates a comprehensive SBOM Inventory from multiple sources, including SBOM files and full-stack application analysis. SBOM is a formal record detailing the components and supply chain relationships used in building software, similar to a list of ingredients on food packaging. Supply Chain Secure continuously discovers third-party assets and attack surfaces, providing visibility into the AppSec stack and offering an accurate inventory of assets. It helps teams establish a holistic view of application security assets, including domains, web and mobile applications, certificates, network services, hosts, and cloud apps. Supply Chain Secure scans enterprise-scale application environments to identify new or shadow assets and provides continuous inventory and scanning for mobile, web, APIs, and cloud assets to reveal new attack vectors.
