Supply Chain Intelligence & Report Catalog
Direct concrete dependency inspections, live edge-cached datalake feeds, and executive regulatory compliance toolkits engineered to eliminate supply chain opacity.
Dependency Deep Dives & SBOM Inspections
Deep, concrete dependency inspections for popular software. Explore exact resolved versions, underlying specification levels, OpenSSF Scorecards, and syntax quirks.
What version of YAML is in Kubernetes 1.31?
Kubernetes v1.31.0 utilizes sigs.k8s.io/yaml v1.4.0 to parse and convert incoming YAML manifests into JSON across the...
What version of OpenSSL is in Node.js 22 LTS?
Node.js v22.6.0 embeds OpenSSL 3.0.13+quic as its primary cryptographic runtime engine, providing default TLS 1.3 cip...
What version of OpenSSL is in Python 3.12?
Python v3.12.5 (CPython) utilizes OpenSSL 3.0.13 as its canonical cryptographic and TLS engine via the standard libra...
Packablock Open Datalake
Public, edge-cached, zero-auth data feeds served via Cloudflare Pages CDN at data.packablock.com with permissive CORS headers for instant spreadsheet ingestion.
Paste directly into cell A1 of Google Sheets or Microsoft Excel. Streams fresh, cryptographically attested data on demand with zero macros, zero API tokens, and zero popup warnings.
CISA KEV & EPSS Crosswalk
1,713+ active CISA Known Exploited Vulnerabilities joined with FIRST.org EPSS exploit probability scores and composite priority tiers.
Runtime Engine SBOM Crosswalk
Go, Node.js, Python, and Rust runtimes mapped to underlying cryptographic libraries, parsers, CycloneDX 1.5 JSON snippets, and PURLs.
Parser Quirks & Syntax Drift
Cross-ecosystem discrepancy matrix covering YAML 1.1 vs 1.2, HCL2 scoping, JSON deserialization, and shadow parameter caveats.
FCC Broadband Nutrition Labels
28 tier-1 residential broadband plan specifications across 9 major ISPs cataloging base fees, promotional roll-offs, and $/Mbps economics.
SEC Form 8-K Incident Tracker
Item 1.05 material cyber incident filings under SEC Release 33-11216, disclosure lags, remediation costs, and DOJ delay exemptions.
FOSS Stewardship Arbitrage
Financial benchmarks comparing $3.5M+ in Big 4 advisory retainer spend against direct upstream open-source foundation grants and attestation.
Cyber Breach Settlements & Fines
Empirical database of $6.1B+ in regulatory enforcement fines, class-action funds, and court-ordered mandatory security CAPEX decrees.
Smart Home & IoT Trust Mark
Consumer and enterprise IoT benchmarks evaluating compliance against FCC U.S. Cyber Trust Mark (FCC 24-26) and NIST IR 8425 baselines.
10–30 Yr IoT Maintenance TCO
Total cost of ownership models across 8 hardware asset classes navigating EU Cyber Resilience Act Article 10(6) extended lifetime obligations.
Executive Cyber Metrics Index
Cross-sector benchmarks across 8 industries tracking dwell times, phishing test failure rates, and cyber insurance loss ratios.
Zero-SaaS OSS License Auditor
29 enterprise software packages analyzed for SPDX licenses, copyleft triggers, OpenSSF Scorecards, and transitive license liability.
M&A Supply Chain Haircuts
Private equity and M&A buy-side benchmarks for tech debt valuation discounts, escrow holdbacks, and post-merger supply chain remediation.
ENISA EU Sector Incident Telemetry
Official ENISA Threat Landscape 2026 empirical dataset cataloging verified incidents across 8 EU critical sectors, primary attack vectors, and actor attribution.
ENISA Threat Landscape JSON Archive
Structured JSON graph detailing vector distributions (ransomware, zero-days, supply chain), state-sponsored attribution shares, and NIS2 Article 21 mappings.
Micro-Enterprise CRA Cost Model
Empirical cost-of-action vs. inaction benchmarks across 5 micro-enterprise archetypes modeling sweat equity compliance vs platform delisting and border seizures.
Living Spreadsheets & Executive Packs
Turn-key analytical models, 16:9 widescreen board decks, and living workbooks engineered for security practitioners, CISOs, and M&A due diligence teams.
Analyst & Engineer Workbooks
Self-refreshing workbooks featuring zero-popup live datalake formulas, WCAG AAA styling, and automated scoring metrics ($5 – $9).
Interactive component resolver mapping host runtimes to embedded crypto engines with CycloneDX/SPDX export formatting.
Comparative syntax reference matrix detailing multi-ecosystem parsing discrepancies, security caveats, and attack mitigations.
Dynamic risk prioritization matrix combining CISA KEV catalog with EPSS exploitation percentiles and SLA timelines.
Consumer broadband comparison model analyzing 28 tiers across 9 major ISPs with true cost and $/Mbps unit cost calculations.
Cross-sector benchmark index mapping 8 industries against dwell time, cyber loss ratios, and NIST CSF / EU CRA controls.
Interactive project dependency risk classifier evaluating SPDX licenses, copyleft triggers, and OpenSSF Scorecards.
Interactive 20-point retail network security checklist, VLAN isolation tester, and PCI-DSS v4.0 SAQ-A readiness calculator.
Home network defense checklist, IoT telemetry isolation matrix, and Pi-hole / AdGuard Home DNS blocklist catalog.
Item 1.05 filing tracker with quantitative materiality scoring model, disclosure lag calculators, and DOJ delay tracking.
FCC 24-26 Cyber Trust Mark eligibility tracker and interactive 15-point NIST IR 8425 consumer pre-procurement audit checklist.
Interactive ENISA ETL 2026 explorer mapping 8 critical EU sectors against Article 21 minimum baseline controls and automated board threat briefing cards.
Underwriting loss-ratio and risk-loading calculator calibrated against ENISA 2026 claims telemetry with multi-carrier broker renewal defense cards.
Interactive living Google Sheet modeling baseline sweat equity compliance costs ($1.6k–$3.3k) vs. platform delisting and border seizure risks with deterministic breakeven decision engine.
Executive Consulting Bundles
Decision frameworks, board-ready 16:9 presentations, and financial exposure models for corporate leadership and audit defense ($79 – $149).
4-scenario Monte Carlo financial exposure workbook, 16:9 board-ready presentation deck, and self-assessment conformity checklist.
Pre-acquisition technical debt discounting framework, inherited vulnerability remediation pricing, and 12-slide investment committee deck.
Financial arbitrage model and 12-slide board deck demonstrating 430%+ ROI by directing advisory spend to upstream foundation grants.
Analysis of $6.1B+ in enforcement fines, class actions, and court-ordered security decrees with 12-slide board deck and fine estimator.
20-year fleet cash flow projection engine, embedded silicon obsolescence matrix, and 12-slide board deck navigating CRA Art. 10(6).
Comprehensive sectorial threat exposure model, 12-slide 16:9 board-ready presentation deck, and Article 21 technical control gap audit.
Actuarial renewal model, 12-slide executive presentation, and parametric loss accumulation sizer for CFOs, risk committees, and brokers.
Turnkey SME consulting package with 4-tab unlocked actuarial model, 12-slide 16:9 executive presentation, and Annex II Module A internal self-assessment blueprint.
Tailored supply chain pipeline reviews, Windmill DAG attestation automation, and compliance certification support.
Enterprise Supply Chain Audits
Partner with our security engineers to audit proprietary dependencies, implement continuous cryptographic attestations, or prepare for EU CRA enforcement.
Submit your inquiry below to discuss custom dependency mapping, CRA readiness assessments, or dedicated Windmill pipeline deployments for your organization.