Gartner defines software supply chain security (SSCS) tools as solutions that reduce business technology risk by protecting against compromise from third-party software. Using threat intelligence, software composition analysis, software bills of materials and third-party governance, SSCS tools identify risk and ensure software integrity from acquisition through delivery, supporting SaaS and hybrid models and improving DevSecOps maturity.