GMO Flatt Security Launches 'Software Supply Chain Assessment' and 'Software Supply Chain Attack Exercise' Services

GMO Flatt Security, a cybersecurity firm under the GMO Internet Group that operates with the mission of 'supporting engineers,' announced on May 26, 2026, the launch of its new 'Software Supply Chain Assessment' and 'Software Supply Chain Attack Exercise' services for development organizations.

The 'Software Supply Chain Assessment' is a service that visualizes the potential scope of damage and prioritization of responses in the event of a security breach, covering areas from dependency package management to CI/CD environment configuration and permission design. It allows organizations to simulate the potential leakage of authentication, confidential, and personal information. The 'Software Supply Chain Attack Exercise' is a tabletop exercise service where development teams practice incident response decision-making based on actual cases, such as the 'axios' package breach.

By combining these services, GMO Flatt Security provides integrated support to harden the entire development pipeline, from visualizing supply chain risks to establishing a structure where teams can act independently during incidents.

This launch comes as risks to source code repositories and CI/CD environments continue to escalate. Since early 2026, major package breaches and developer credential thefts have become more frequent, raising concerns about secondary damage from leaked API keys and other credentials. In addition to the defensive features of 'Takumi,' GMO Flatt Security is further strengthening its support by adding professional-led diagnostics and exercises.