See All Locations
Weaponised open-source packages, AI-generated code of uncertain provenance, and cascading dependency failures now sit alongside ransomware and credential theft as risks organisations cannot afford to manage reactively. The question is no longer whether to invest in software supply chain security. It is whether your current programme, and your current vendor choices, are built for the regulatory and threat environment ahead.
The 2026 Leadership Compass on Software Supply Chain Security benchmarks the market across source and build integrity, vulnerability and dependency management, secrets and non-human identity governance, package repository controls, and attestation, mapping where vendors lead, where they're acquiring their way to parity, and where the market remains critically underserved.
One finding stands out: platform vendors are closing the capability gap with focused specialists, but attestation remains a weak point across the board. With the EU Cyber Resilience Act, NIST SP 800-218, DORA, and NIS2 raising explicit requirements for provenance evidence and compliance documentation, organisations treating attestation as a future problem are already behind schedule.
Jonathan Care, Practice Lead AI at KuppingerCole Analysts, presents the key findings from the 2026 Leadership Compass on Software Supply Chain Security, offering an independent assessment of the vendor landscape and the capability gaps that matter most.
Mitun Zavery, VP of Solution Architecture EMEA at Sonatype, brings a practical, real-world perspective to the discussion, sharing how organisations are addressing software supply chain security challenges, regulatory requirements, and vendor selection in today's evolving threat landscape.
Who should attend
If you're responsible for securing the software development lifecycle, managing supply chain risk, or selecting security vendors, this webinar is for you.
