[](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Cortex Cloud logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/cortexcloud-logo-dark.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* Use Cases  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Use Cases  
  Use Cases
  
  * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
    Real-time cloud security powered by unified data, AI and automation
  * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)  
    Prevent risks at the source
  * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)  
    Rapidly prioritize and remediate risks across any cloud
  * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)  
    Stop cloud attacks before they become breaches
  * [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown)  
    Detect, investigate and respond to threats across enterprise and cloud

* Solutions  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions  
  [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
  
  * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown)
  * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [IaC Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown)
  * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown)
  * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown)
  * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown)  
    [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
  * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown)
  * [Cloud Attack Surface Management (ASM)](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown)  
    [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
  * [Cloud Detection and Response (CDR)](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
  * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/container-security?ts=markdown)
  * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown)
  * [Web Application Security](https://www.paloaltonetworks.com/cortex/cloud/web-application-security?ts=markdown)  
    [Security Operations](https://www.paloaltonetworks.com/cortex/?ts=markdown)
  * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
  * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
  * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
  * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
  * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)  
    [Industries](https://www.paloaltonetworks.com/industry?ts=markdown)
  * [Government](https://www.paloaltonetworks.com/cortex/cloud/government?ts=markdown)

* [Product Tours](https://www.paloaltonetworks.com/cortex/cloud/product-tours?ts=markdown)

* Resources  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources  
  Learn
  
  * [Blog](https://www.paloaltonetworks.com/blog/cloud-security?ts=markdown)
  * [Cloud Research](https://www.paloaltonetworks.com/cortex/cloud/research?ts=markdown)
  * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
  * [Live Community](https://live.paloaltonetworks.com/)
  * [Interactive Workshops](https://www.paloaltonetworks.com/cortex/cloud/interactive-workshops?ts=markdown)  
    Product Information
  * [Technical Documentation](https://docs.paloaltonetworks.com/)
  * [Open Source Projects](https://www.paloaltonetworks.com/cortex/cloud/open-source-projects?ts=markdown)
  * [Support](https://support.paloaltonetworks.com/Support/Index)  
    Resources
  * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown)
  * [Customer Success Stories](https://www.paloaltonetworks.com/customers?ts=markdown)
  * [Resource Center](https://www.paloaltonetworks.com/resources?ts=markdown)
  * [Events](https://events.paloaltonetworks.com)

* 

* [Request a Demo](https://www.paloaltonetworks.com/cortex/cloud/demo?ts=markdown)  
  ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg)  
  [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
  Search  
  Close search modal

*** ** * ** ***

CORTEX CLOUD

# Software Supply Chain Security

Deploy secure code with confidence.

* [Request a demo](https://start.paloaltonetworks.com/cortex-cloud-appsec-demo.html)  
  ![Supply Chain Graph](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/Supply-Chain-Graph.png)  
  ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg)  
  ![Supply Chain Graph](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/Supply-Chain-Graph.png)

## RECOMMENDED

\[![blog](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/02-Breakdown-180x180.png)

### Widespread npm Supply Chain Attack Puts Billions of Downloads at Risk

Read Blog\](https://www.paloaltonetworks.com/blog/cloud-security/npm-supply-chain-attack/?ts=markdown)  
\[![guide](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/02-Guide-to-the-top-10-CI-CD-security-risks-180x180.png)

### Guide to the Top 10 CI/CD Security Risks

Read Technical Guide\](https://www.paloaltonetworks.com/resources/whitepapers/top-10-cicd-security-risks?ts=markdown)  
\[![report](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/thumbnail-gigaom-radar-for-software-supply-chain-security-report-2025.png)

### GigaOm Radar for Software Supply Chain Security

Analyst Report\](https://start.paloaltonetworks.com/gigaom-radar-for-software-supply-chain-security-report.html)  
\[![blog](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/02-AI-SPM-update-180x180.png)

### AI-SPM Levels Up: Model Activity, Agentic AI \& Supply Chain Risks

Read Blog\](https://www.paloaltonetworks.com/blog/cloud-security/aispm-capabilities-enhanced-security/?ts=markdown)  
solutionUse CasesDemoResources  
[solution](#solution)  
[Use Cases](#use-cases)  
[Demo](#demo)  
[Resources](#resources)  
{#solution} SOLUTION

## Development ecosystems are complex. Securing them doesn't have to be.

![reduce attacks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/cortex-cloud-software-supply-chain-page-04-1.svg)

### Illuminate the entire development ecosystem

Face rapidly growing and changing development environments with expansive visibility.  
![behavioral analytics](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/cortex-cloud-software-supply-chain-page-04-2.svg)

### Monitor and protect software supply chains

Secure the whole SDLC to ensure that pipelines are protected and no malicious code can be injected.  
![incident response](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/cortex-cloud-software-supply-chain-page-04-3.svg)

### Manage increasing compliance requirements

Assure that software supply chains adhere to complex compliance standards and regulations.  
{#use-cases}  
USE CASES

## Comprehensive visibility. Continuous protection. Confident deployments.

[![AppSec Ecosystem](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/AppSec-Ecosystem.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/AppSec-Ecosystem.png?ts=markdown)  
COMPLETE VISIBILITY

### See the whole application development ecosystem

Unlock visibility across the entire software supply chain --- from developer tools and code identities to registries, orchestrations and SBOMs.  
[![Supply Chain tools](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/Supply-Chain-tools.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/Supply-Chain-tools.png?ts=markdown)  
IMPROVE SUPPLY CHAIN POSTURE

### Protect development pipelines

Ensure all code originates from a secure pipeline by managing tool usage, tracking code identities and effortlessly enforcing out-of-the-box supply chain policies.  
[![OWASP Compliance](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/OWASP-Compliance.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/OWASP-Compliance.png?ts=markdown)  
STAY COMPLIANT

### Automate software supply chain compliance

Maintain continuous adherence to industry and regulatory standards with automated reporting, SBOM generation and governance.  
ON DEMAND  
![virtual event](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/aspm/cortex-cloud_L2-appsec_ASPM-launch_event-announcement_web-recommended-tile_180x180.jpg)

AppSec's New Horizon
What's next in application security. Only on Cortex Cloud.
---

[Watch now](https://www.paloaltonetworks.com/resources/webcasts/appsecs-new-horizon-virtual-event?ts=markdown)  
{#demo}

## Experience It for Yourself

### See how Cortex Cloud can supercharge your AppSec program.

{#resources}

## Expert resources you can trust

{#resources} [View all](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fcortex-cloud&ts=markdown)  
\[TIP SHEET

#### Harden Your CI/CD Pipelines

![Tip Sheet: CI/CD Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/thumbnail-tip-sheet-ci-cd-security.png)\](https://www.paloaltonetworks.com/resources/datasheets/tip-sheet-ci-cd-security?ts=markdown)  
\[WHITEPAPER

#### Guide to the Top 10 CI/CD Security Risks

![Top 10 CI/CD Security Risks: The Technical Guide](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/thumbnail-top-10-ci-cd-security-risks.png)\](https://www.paloaltonetworks.com/resources/whitepapers/top-10-cicd-security-risks?ts=markdown)  
\[ANALYST REPORT

#### GigaOm Radar for Software Supply Chain Security

![GigaOm Radar for Software Supply Chain Security Report](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/thumbnail-gigaom-radar-for-software-supply-chain-security-report-2025.png)\](https://www.paloaltonetworks.com/resources/research/gigaom-radar-supply-chain-security?ts=markdown)  
\[BLOG

#### Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk

![Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/supply-chain-security/07-blog-519x744.png)\](https://www.paloaltonetworks.com/blog/cloud-security/npm-supply-chain-attack/?ts=markdown)  
PrevNext  
{#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2025 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language