Guiding Principles

Rooted in community, transparency, and practical application, these guiding principles drive our commitment to security, interoperability, and risk reduction.

Ease of Adoption

A simple, prescriptive approach that streamlines implementation and ensures immediate benefits.

Community-Driven

Built by a diverse, global community with a shared goal of improving software supply chain security.

Open and Transparent

Developed openly, with full transparency and free access to standards.

Risk-Reducing Standard

Minimizes risks by addressing security, privacy, and safety throughout the software supply chain.

Practical and Usable

Designed for real-world applications, with a focus on practical, actionable outcomes.

Interoperable

Ensures seamless integration across diverse systems and technologies.

Resilient and Scalable

Built to adapt and scale with evolving software ecosystems.

Evolving and Inclusive

Continuously evolves, welcoming contributions and perspectives from all.

Vendor Neutral

Independent from any vendor influence, ensuring unbiased standards.