Company threat profiles built from entirely passive, public sources, where every claim carries the source it came from and a rating for how much that source is worth.
Of the three companies with supplier side research, Rockwell Automation, Inc. has the cleanest inbound record: no disclosed breach of its own (a verified negative). It also has the only CISA KEV entry among them, CVE-2021-22681 in its own products, actively exploited against US critical infrastructure, water and wastewater utilities among it (CISA AA26-097A, 2026-04-07).
Honeywell International Inc and Emerson Electric Co are the reverse: a breach of their own on record (Honeywell International Inc’s confirmed; Emerson Electric Co’s reported, not confirmed), and no CISA KEV entry in what they sell. Ranked on breach history alone, the order of these three inverts.
Asked of all 45 companies from CISA’s catalogue, the supplier side question has two answers: Rockwell Automation, Inc. (CVE-2021-22681) and Trimble Inc. (CVE-2025-0994) carry a known exploited flaw in their own products. Every company’s check is on its As a supplier tab.
9 of 45 companies were collected in the 7 days to 14 October 2026, and 8 of them changed: 50 vendors added, 2 vendors no longer seen, 44 CVEs newly seen and 286 hosts newly seen.
4 more changes rated critical or high are on the companies’ Changes tabs.
Every change, subsidiaries and hosts included, is on each company’s Changes tab, snapshot by snapshot.
Nine tabs across 45 profiled companies. Search by name, ticker, CIK or domain. Technology stack, suppliers, corporate structure, adversary ranking, and the company read back as a supplier to everyone else. Any profile prints, or saves as PDF, with its TLP:CLEAR marking on every page.
Open the profiles → DashboardThe peer set view. Standing concentration risk across the watchlist, projection of a vendor event onto every company reached by it, and the dependency matrix behind both.
Open the projection →Most tooling in this category starts from an indicator and works outward. This starts from the business and works inward, which is the direction an adversary actually moves: what the company depends on, who else depends on the same thing, and what a failure at that point would reach.
The sourcing is the argument. Every claim carries an Admiralty rating for source reliability and information credibility, every assessment uses the ICD 203 estimative ladder and nothing else, and a claim with no source is rejected when it is constructed rather than caught at review. Where collection failed, the report says so instead of reporting an absence of findings.