Research Reports | Software Supply Chain & SBOM Research | Intellinative

Evidence-led research on software supply chain security, SBOMs and runtime risk, checked against CISA guidance, academic studies, incident analyses and Indian regulation.

• Eight Private Keys: An Evidence-Led Investigation of the eMudhra Intermediate CA Compromise — Eight eMudhra intermediate CA private keys were exposed and proven to browser makers on 17 October 2026. This dossier separates what is established from what is not, maps every trust layer that still needs fixing, and gives teams a playbook to verify their own exposure.
• AI-Driven Vulnerability Scanners and Capital Market Resilience: SEBI's Framework for Autonomous Cyber Threats — Frontier AI models now find and weaponise software flaws in hours. This report reads SEBI's May 2026 advisory against Anthropic's own figures, exploitation telemetry and other regulators' responses, and turns Annexure-A into an operating plan.
• Shift-Left Should Not Mean Shift-Only: The Shift-Left Gap Report — Source and dependency scanning show the risk before the build, but what gets built and run can differ. This report tests that argument against CISA guidance, peer-reviewed and preprint studies, incident analyses and vendor telemetry.