Eliminate Supply Chain Risk Through Physical Path Governance

Supply chain attacks exploit the persistent connections that organisations maintain with vendors, managed service providers, and software suppliers. When these paths are physically severed between active sessions, the attack vector ceases to exist.

62%

Of breaches originate through third-party access

Zero

Persistent vendor paths outside maintenance windows

100%

Third-party sessions recorded on tamper-proof storage

4.5x

Faster containment when vendor paths are physically severed

"Our MSP had a VPN into our network that was active 168 hours a week. They used it for about 6 hours. That left 162 hours where an attacker had a trusted path into our core infrastructure."

1. ST 01

   Vendor Compromise

   T1195

   ◤ Attacker

   Attackers breach a software vendor, MSP or update server that customers already trust.

   ◢ Control breaks it

   Vendor reach into the protected zone is severed by default. There is no permanent trust to ride.

   FirebreakUnlink
   ✕ Break here
2. ST 02

   Trusted Delivery

   T1078.004

   ◤ Attacker

   Pushes a tainted update or piggy-backs on a legitimate support session into customer environments.

   ◢ Control breaks it

   Maintenance windows open only as time-bound Relay sessions. The connection closes on schedule, every time.

   RelayLock
   ✕ Break here
3. ST 03

   Execution in Production

   TA0002

   ◤ Attacker

   Runs the malicious payload against production assets, often with privileges granted to the vendor.

   ◢ Control breaks it

   Vendor-initiated changes are routed through Execute with multi-party approval and Validate before they reach the asset.

   ExecuteValidate
   ✕ Break here
4. ST 04

   Onward Movement

   TA0008

   ◤ Attacker

   Pivots from the vendor-managed system into the wider estate.

   ◢ Control breaks it

   Isolate enforces the zone boundary. The compromised system cannot reach into adjacent zones without a fresh, approved path.

   IsolateFirebreak

Scheduled Access Windows

Vendor connections activate only during defined maintenance windows. Between windows, the physical path does not exist and cannot be established remotely.

Multi-Party Session Approval

Every vendor session requires approval from both the vendor team and internal security before the physical path is activated.

Complete Session Recording

All vendor activity during active windows is captured on physically disconnected storage that neither the vendor nor an attacker can access or modify.

Instant Vendor Disconnection

When a supply chain compromise is detected, all vendor paths are physically severed within seconds, regardless of which vendor is affected.

Vendor Zone Isolation

Third-party access is confined to a physically separated zone with no path to production systems, backup infrastructure, or management planes.

Vendor Compliance Evidence

Automated logging provides the evidence required for ISO 27001 supplier assessments, NIS2 supply chain requirements, and contractual SLA compliance.

Third-Party Path Audit

Map every vendor, MSP, and software supplier connection into your infrastructure, documenting active hours, data flows, and the systems each path can reach.

Window and Zone Design

Define maintenance windows, vendor zones, and multi-party authorisation requirements for each third-party relationship based on operational need and risk profile.

Pilot with Primary MSP

Deploy Relay-governed access for your primary managed service provider, testing scheduled windows, emergency access procedures, and session recording.

Full Vendor Governance

Extend to all third-party connections with automated window management, vendor zone isolation, and continuous compliance evidence generation.