Scribe is a holistic software supply chain platform for managing SDLC risk and securing your software factory and products from development to deployment. We implement zero trust, continuous assurance, attestation concepts, and SDLC-guardrails-as-code to enhance products’ security and trustworthiness while reducing friction with development teams and speeding up your time to market. • DISCOVER all software assets, lineage and risk posture and gain complete visibility to your AppSec risk by applying BI & AI to an evidence-based SSC-inclusive repository • MITIGATE preemptively SSC risks in your software factory and artifacts by auto-enforcement of SSC policy (SDLC guardrails) • PREVENT software tampering attacks by automating continuous code signing and Intoto attestations. • DEMONSTRATE compliance adherence with SSC frameworks (e.g. SLSA) and regulations (e.g. SSDF) by automatically generating and collecting signed evidence from CI/CD pipelines.

Manifest Cyber is a leader in AI and software supply chain security, empowering federal agencies, regulators, and Fortune 500 leaders across healthcare, automotive, and defense. Our platform uncovers hidden software supply chain risks, enabling customers to confidently detect and manage threats at scale. From national security to public health, we enable trusted operations where the stakes are highest.

We offer world-class expertise in science and engineering to help solve environmental challenges. Battelle’s innovative technologies and methods minimize or prevent damage to the environment while restoring valued resources.

CyberSeQ is building the missing control layer for cryptography. We help organizations discover, measure, and manage cryptographic risk, and turn post-quantum migration from an uncertain threat into an operational, controlled process.

Cyber Defense3 (CD3) provides customized cybersecurity solutions that center on three pillars: (1) governance, (2) risk management, and (3) compliance. CD3 works with clients in multiple industries, including the intelligence community, finance sector, infrastructure, health and human services, defense, and more.

Craft is the intelligent supply chain resilience platform that enables organizations to make smarter supplier decisions, protect against disruptions; and optimize supply chain strategies. We empower businesses to strengthen their supplier networks and supply chains with the industry's most trusted and comprehensive data fabric and advanced risk mitigation engine. Our easy-to-use platform provides 360-degree visibility to quickly explore and evaluate supplier networks, AI-driven insights to detect and mitigate disruptions, and collaborative tools to optimize supply chain strategies. With Craft, procurement and supply chain professionals can confidently navigate regulatory environments, uphold ethics, and drive business continuity. At Craft, we take hiring seriously. With the rise of fake job postings and fraudulent recruiters, we want to ensure candidates know what to expect from our recruiting process. Craft recruiters will only contact candidates through official Craft email addresses or LinkedIn, never through personal accounts or messaging apps. We also never ask for sensitive personal information upfront. If you’re interested in joining our team, please apply directly through our website to ensure a secure and transparent experience.

SECTARA (Security Threat And Risk Assessor) was created for security consultants and corporate security managers frustrated with the lack of advanced security risk assessment (specific) software and tools. Performing risk assessments using MS Office products, in particular, can be a tedious process, plagued by styling / formatting problems, layout selection and the routine need for reverse engineering to assure logic throughout. Such methods are not particularly collaborative, present data security concerns and often drift beyond the bounds of recommended security standards and their assessment methodologies (because we are all human). Moreover, enterprise risk systems are necessarily generic and security risk consultant’s needs are very specific. It’s also difficult to get IT and expenditure approval for internally hosted systems, especially ones that are not part of ‘core’ business. SECTARA was developed in response to those problems, providing a security risk assessment and security management environment in which best practices for the security industry are within easy reach and available at an affordable cost. Importantly, risk assessment methodologies detailed within leading global security standards have been accounted for within the system, in a way that addresses the needs of the most advanced security practitioners, but also keeps it simple for those new to the industry. In doing so we designed SECTARA to be the natural companion to the Security Risk Management Body of Knowledge (SRMBoK) and the more recently released Security Risk Management Aide Memoire (SRM-AM); having the author of both texts as co-founder and part of the team made this task very easy.

Siemens AG (Berlin and Munich) is a leading technology company focused on industry, infrastructure, mobility, and healthcare. The company’s purpose is to create technology to transform the everyday, for everyone. By combining the real and the digital worlds, Siemens empowers customers to accelerate their digital and sustainability transformations, making factories more efficient, cities more livable, and transportation more sustainable. A leader in industrial AI, Siemens leverages its deep domain know-how to apply AI – including generative AI – to real-world applications, making AI accessible and impactful for customers across diverse industries. Siemens also owns a majority stake in the publicly listed company Siemens Healthineers, a leading global medical technology provider pioneering breakthroughs in healthcare. For everyone. Everywhere. Sustainably. In fiscal 2025, which ended on September 30, 2025, the Siemens Group generated revenue of €78.9 billion and net income of €10.4 billion. As of September 30, 2025, the company employed around 318,000 people worldwide on the basis of continuing operations.

ThreatLight is reshaping security operations for the speed, scale, and complexity of modern threats, helping organizations act faster, reduce disruption, and protect business continuity. Its AI-native platform unifies security signals, investigation, forensics, and response in one operating picture, replacing fragmented tools and slow handoffs with coordinated action. Founded by leaders with decades of experience across offensive security, defensive operations, and incident response, ThreatLight is security-first, not code-first. The platform is shaped by real-world investigations and built around the decisions security teams need to make under pressure. ThreatLight disrupts the closed ecosystems and vendor dependencies that hold security operations back. Vendor, cloud, and model agnostic by design, its platform works across existing environments while providing native capabilities for deeper visibility, investigation, forensics, and response. It can be deployed directly by Enterprises and MSPs or delivered as a managed offering for organizations of any size. ThreatLight’s services bring the same security-first approach into direct delivery, led by senior practitioners across managed security, incident response, offensive security, and strategic advisory. Response-Forward™ Cybersecurity. No blind spots. No handoffs. For more information visit ThreatLight.com

CYBR International is a global cybersecurity solutions provider to commercial and government organizations. CYBR International recognizes the cybersecurity landscape is constantly evolving. Enterprise networks and organizational missions require a holistic cybersecurity plan which includes People, Policy, Procedures and Processes (Four P’s) that incorporates pro‐active, active and reactive Methodologies, Mechanisms and Metrics (Three M’s). Utilizing the “Four P’s/Three M’s” concept, CYBR International is able to incorporate people, policy, procedures and processes that are proven and repeatable (Methodologies); integrate devices and infrastructure after performing a thorough analysis and engineering review (Mechanisms) and compile measurements into a detailed deployment, status and performance review to ensure requirement and solution success (Metrics).

A new way to face the challenges of cyber threats. The DYNAMO project has received funding from the European Union’s Horizon Europe research and innovation programme under grant agreement No. 101069601

Spirhed builds secure, scalable Azure platforms for hybrid, edge, and cloud environments. We help organisations modernise and operate complex IT and OT environments through Azure Local, Azure Arc, Azure platform services, Infrastructure as Code, governance, security, and SRE-aligned operations. From datacenters to edge locations and Industry 4.0 scenarios, we create resilient platforms that bring consistent management, stronger security, and better operational control across the environment. Our delivery model covers the full lifecycle — strategy, design, build, migrate, handover, and operate — and is grounded in CAF, WAF, SAF, and Zero Trust principles. By integrating Microsoft Defender XDR, Microsoft Sentinel, automation, monitoring, and structured operational handover, we help customers move from project delivery to stable, supportable day-two operations with confidence. With deep architectural expertise, Microsoft MVP leadership, and strong technology partnerships, Spirhed delivers hybrid Azure platforms built for clarity, stability, and security by default.

System 1, Inc. is a cybersecurity and critical infrastructure security consulting firm which advises business leaders in the federal & state government and critical infrastructure (utilities, oil & gas, and supporting firms) sectors. We provide strategic advice, assistance, and solutions to our public and private sector clients. System 1 aids client senior leadership in focusing on and understanding cyber risk strategy within their larger business risk structure, guide clients in institutionalizing cybersecurity governance and programs, and lead in the development of innovative approaches to address clients’ cybersecurity & assurance risk needs. With deep industry and functional experience System 1’s world-class team provides timely, high-impact results through an innovative portfolio of services. We help clients approach the complex and shifting forces that shape the cyber and broader security and assurance environment, assisting them in identifying critical leverage points and developing results-oriented strategies for reduced risk, smarter compliance, better performance, and optimized investments. System 1 personnel are management and technical experts who focus on advancement and change through the prism of people, processes, and technology; providing an integrated solution tailored to each client’s unique business risk tolerance, existing organizational risk management processes, and the evolving cybersecurity risk environment.

Xpertex has been at the cutting edge of cyber security development since 2006. Drawing on hands-on experience executing the most complex projects across the military, defence, and intelligence sectors. We work closely with our customers and colleagues from across the Exponential-e group to design and deliver solutions that help organisations effectively navigate the evolving complexities of the cyber threat landscape – all while retaining full cost control, visibility, and operational efficiency. We deliver cyber-secure solutions, cyber and security advisory and managed services for our customers of all sizes. Our Consultants have typically held roles in in the private and intelligence sector so we understand your challenges and the difficult juggling act that you face on a daily basis. We have selected best of breed technology partners that have been chosen for their specific or unique cyber-secure features and functions. This approach also allows us to become proficient in each technology and gain subject matter expertise to provide the best advice to our customers.

Orpheus is a leading cybersecurity company that offers predictive and actionable intelligence to clients, enabling them to anticipate, prepare for, and respond to cyber threats. Our threat intelligence is used to create threat-led cyber risk ratings, providing a more accurate assessment of risk than just analysing an organisation’s attack surface. We offer subscriptions that provide tailored intelligence for your organisation, based on factors such as your industry, activities, and technology. With all-source intelligence collection, sophisticated technology, and expert analysis, our subscriptions are curated by highly qualified analysts who work closely with you to ensure you receive the intelligence you need. We are proud to be one of only 7 companies accredited by the UK’s Financial Conduct Authority (‘FCA’) to its Skilled Person Panel of experts able to provide cyber threat intelligence at the highest level to FCA-regulated companies. Furthermore, we are one of only a handful of companies accredited by the Bank of England for intelligence-led critical national infrastructure testing frameworks such as ‘CBEST’ for the UK financial sector and ‘TBEST’ for the UK Telecoms sector. Additionally, Orpheus is accredited by the international standards and accreditation body CREST as a specialist cyber threat intelligence company. Let us show you a demo of our ground-breaking portal.

Global Supply Chains are a way of life for modern business, becoming more complex and integrated. The organizations that operate within the Supply Chains have become smarter and are not only heavily dependent on Information and Communication Technologies but are also interconnected for exchanging and sharing large amounts of data. Moreover, there is still no easy, structured, standardized and trusted way to forecast, prevent and manage interrelated and propagated cybersecurity vulnerabilities and threats, in a way that takes into account the heterogeneity and complexity of today’s Supply Chains. Therefore, there is a pressing need for devising methodologies, techniques and tools for the efficient evaluation and handling of security threats and vulnerabilities supporting all involved infrastructures for the provision of critical Supply Chain services. CYRENE comes to fill this gap for devising such methodologies, techniques and tools.

Provider of AI-powered business solutions and cybersecurity services. The company specializes in transforming physical and unstructured documents into digital assets, automating threat monitoring and response, and managing intelligent cloud environments, and also offers products like analytics platforms, AI application integration tools, customizable AI training programs, workflow automation, and AI governance platforms, enabling clients to enhance operational efficiency and strengthen digital security.

"Innovate Fearlessly, Protect Relentlessly." St. Fox is a leading AI Security expert helping enterprises secure their AI, Cloud, Data, endpoints, and applications. We analyse and protect our clients' businesses so they can innovate and scale with confidence.

𝗤𝘂𝗮𝗻𝘁𝗶𝘁𝗶 ∞ - 𝗖𝘆𝗯𝗲𝗿 𝗗𝗲𝗳𝗲𝗻𝗰𝗲 𝗶𝗻 𝘁𝗵𝗲 𝗖𝗹𝗼𝘂𝗱 Quantiti ∞ is Niskaa’s flagship European Managed Cloud and Cybersecurity Monitoring environment. It combines 𝗠𝗮𝗻𝗮𝗴𝗲𝗱 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀 𝗣𝗿𝗼𝘃𝗶𝗱𝗲𝗿 (𝗠𝗦𝗣) functions - through a Network Operations Centre (NOC) - with 𝗠𝗮𝗻𝗮𝗴𝗲𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀 𝗣𝗿𝗼𝘃𝗶𝗱𝗲𝗿 (𝗠𝗦𝗦𝗣) capabilities - through a Security Operations Centre (SOC). Built on 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝗔𝗪𝗦 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 and aligned with GDPR, NIS2, DORA, and ISO standards, Quantiti ∞ delivers 24/7 cybersecurity monitoring, threat detection, vulnerability management, and Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) capabilities. 𝗤𝘂𝗮𝗻𝘁𝗶𝘁𝗶 ∞ 𝗶𝘀 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗲𝗱 𝘁𝗼 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟰𝟮𝟬𝟬𝟭, 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟮𝟳𝟬𝟬𝟭, 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟮𝟳𝟬𝟭𝟳, 𝗜𝗦𝗢/𝗜𝗘𝗖 𝟮𝟳𝟬𝟭𝟴, 𝗮𝗻𝗱 𝗜𝗦𝗢 𝟵𝟬𝟬𝟭, 𝘄𝗶𝘁𝗵 𝗦𝗢𝗖 𝟮 𝗧𝘆𝗽𝗲 𝟮 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗶𝗻 𝗽𝗿𝗼𝗴𝗿𝗲𝘀𝘀. Organisations use Quantiti ∞ to run critical business applications, host sensitive data, and deploy their own cloud-based services. It is ideal for AI systems, Software-as-a-Service (SaaS) platforms, regulated data (personal, financial, healthcare, IP), and cloud-native operations requiring European compliance. Quantiti ∞ offers flexible deployment: multi-tenant, single-tenant, or hybrid. Clients choose the level of management they need: from full outsourcing to selective monitoring. It scales for enterprises and mid-sized businesses. Services include continuous monitoring, threat intelligence, vulnerability scanning, penetration testing, incident response, log management, and compliance reporting. All services are delivered from Europe and in Europe by Niskaa experts, ensuring compliance with European data sovereignty and regulatory requirements.

Blue Coral is a highly specialized security services provider and risk mitigation consultancy offering unparalleled service and experience to a small number of select clients. • Cybersecurity services •Emerging technology solutions. Blue Coral was founded on the belief that the collective lessons learned by elite military veterans and proven law enforcement professionals, screened by their peers and tested throughout their careers, are of extreme value to global business and international competition. Blue Coral employs Advisors with operational and managerial experience from around the world in a broad variety of threat environments to include direct combat, peace-time training, and politically sensitive settings. We demand discipline and drive innovation. With Blue Coral on your side, you gain access to a worldwide network of vetted professionals significantly increasing your/our probability of success. We minimize your risk and facilitate your success. The Blue Coral Advisory Group is a consulting firm that stands out from the rest and transforms seemingly insurmountable challenges into realized opportunities. Contact us to discuss how we can assist. +1.305.432.6822 BlueCoralAG.com Blue Coral. Easy Day.

Kaisura offers expertise in the fields of Cybersecurity, Privacy and Artificial Intelligence Security. We have cross industry experience and are pioneers in AI security in healthcare. For Cybersecurity, Kaisura offers assistance with setting up a more secure stance in general, whether through policy development, or resiliency plans such as Business Continuity and Disaster Recovery Plans, for a business to operate more smoothly in regard to cybersecurity. We also offer Application Security services such as Threat Modeling and promoting secure SDLC practices. Risk assessments are another service offered in this space, and the Kaisura team collectively possesses decades of conducting cybersecurity risk assessments. In regard to privacy related services, we maintain an up-to-date awareness of regulations in this space (e.g., HIPAA) and offer assistance to achieve optimal compliance. Gap Assessments are utilized to determine the level of compliance with a given regulation, and we provide measures to apply for closing any identified gaps. Additionally, we provide services for enhancing privacy management, including conducting assessments, such as Privacy Impact Assessment or Transfer Impact Assessment, or review of Technical and Operational Measures (TOMs), as these elements are required under certain regulations. In the area of securing AI, we offer risk assessments of AI applications in order to determine level of risk, and to assess the design as it pertains to recognized best practices. We also recommend mitigation measures to apply for closing identified gaps. Furthermore, we offer AI related policy development, risk management, and AI security awareness training. Lastly, Kaisura maintains an awareness of current and approaching laws and regulations surrounding the use of AI, and we offer insight into applicable regulations to a given business, as well as conduct gap assessments and suggest applicable mitigation measures to apply in order to achieve compliance.

CCI is a non-profit international association, originating in Spain, of professionals and entities - private and public - concerned about the growing risk in automation and industrial digitization. It works to advance and improve the level of cybersecurity in the industry by facilitating relationships, knowledge and experiences of the sectors involved in this area, mainly in Europe and Latin America. Thanks to a multidisciplinary team of coordinators and experts, we develop research activities, training, events, generation of publications and tools for an ecosystem of more than 3,000 members from 45 countries.

Developer of market intelligence and supply chain risk analytics platform intended to cater to commercial and government clients. The company delivers insights with analytics-as-a-service and combines commercial software tools, innovative visualizations, expert analysts, and curated open data, providing clients with a platform that is configured quickly across a variety of use cases that continuously delivers tailored updates.

Versed AI helps companies monitor, manage, and mitigate supply chain risks with AI-powered supply chain visibility and transparency. We do this by using cutting edge natural language processing (NLP) techniques to extract buyer-supplier relationships from text documents. We can then aggregate this into a large supply chain map. Use cases include: - Meeting regulatory requirements, such as the UK Modern Slavery Act. - Pinpointing possible points of failure in the supply chain, such as common sub-tier suppliers. - Identifying geographical concentrations of risk

SCAIR® the Award-Winning Biopharmaceutical Supply Chain Risk Management Software for Operational Resilience. SCAIR® maps and models your business’ global supply chain relationships, so you can build resilience into your supply networks, monitor compliance, and protect your organisation’s profits. This award-winning tool has been designed specifically for the unique characteristics of the pharmaceutical industry: batch manufacture, multinational supply chains and strict medical regulation. SCAIR® is the go-to product for pharmaceutical organisations – and other highly regulated industries like Insurance – that have a relentless desire to ensure business continuity and success. Launched in 2006, SCAIR® was the first biopharmaceutical supply chain risk management software to go to market in the UK. Our team has worked with dozens of life sciences clients and highly regulated industries, including FTSE 100-listed businesses and global names in Insurance and Reinsurance. Our software and consultancy reflect this specialist insight. Protect your business by pinpointing weak links in your supply chain – strengthening that supply chain and helping you turn bigger profits.