GMO Flatt Security Launches New Services
In a bold move to enhance cybersecurity for software developers, GMO Flatt Security, a part of the GMO Internet Group, has announced the launch of two pivotal services aimed at strengthening defenses against software supply chain attacks. Starting May 26, 2026, the company will offer "Software Supply Chain Diagnostics" and "Software Supply Chain Attack Drills" to aid development organizations in protecting their software supply chains.
The Rise of Software Supply Chain Attacks
Recent months have seen a surge in software supply chain attacks, creating serious ramifications for organizations worldwide. In March 2026, a major package known as "axios" experienced a breach, leading to malicious packages being added to its dependencies. This incident was just one of many that underscored the risks of leaking sensitive information, such as authentication and personal data, from source code repositories and CI/CD environments.
The primary concern here lies in the severe risks posed by such breaches. For example, during these attacks, not only are developer machines compromised, but confidential developer credentials and personal information contained within source code and CI/CD environments are also exposed. This has the potential to escalate into serious repercussions for the organizations involved.
Services Designed to Counteract Threats
GMO Flatt Security's new offerings are strategically designed to help organizations visualize risks in their software supply chain and train development teams to effectively respond to incidents. The "Software Supply Chain Diagnostics" will assess the vulnerabilities within dependency packages and CI/CD environments, providing organizations with insights into the possible extent of damage should an attack occur.
On the other hand, the "Software Supply Chain Attack Drills" will utilize real-world breach scenarios, such as those from "axios" and "Bitwarden," enabling development teams to practice incident responses in a controlled environment. By engaging in tabletop exercises crafted around actual breach examples, teams can enhance their decision-making skills and improve their incident management capabilities.
Strengthening Cybersecurity Practices
GMO Flatt Security recognizes that traditional security measures are not enough to combat the rapidly evolving landscape of cyber threats. Following the launch of these new services, the company aims to provide comprehensive support by combining technological tools and professional expertise. The tools provided, including automated blocking of malicious packages and visibility into CI/CD execution, will complement the evaluation and training offered through the diagnostics and drills.
The Services are aimed at addressing specific issues faced by software developers, providing them with the knowledge and resources needed to navigate the complexities of cybersecurity in the software supply chain.
Future Outlook
As cyber threats evolve and diversify, the importance of robust cybersecurity measures cannot be overstated. GMO Flatt Security is committed to its mission of supporting engineers and fostering a secure environment in which they can focus on development without fear of security breaches. Through initiatives like the new software supply chain services, GMO Flatt Security aims to empower development teams and safeguard sensitive information from potential attacks.
About GMO Flatt Security
GMO Flatt Security has positioned itself as a leader in the cybersecurity domain, with a mission focused on supporting engineers as they navigate the complex landscape of software development. The company's approach encompasses both the development of proprietary security products and comprehensive support services tailored to the specific needs of each client.
For more information about their new offerings, visit
Software Supply Chain Diagnostics or
Software Supply Chain Attack Drills.