{"id":2772,"date":"2025-01-06T08:00:00","date_gmt":"2025-01-06T16:00:00","guid":{"rendered":""},"modified":"2025-12-30T12:15:49","modified_gmt":"2025-12-30T20:15:49","slug":"a-guide-to-securing-software-supply-chains-for-early-stage-startups","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/","title":{"rendered":"A guide to securing software supply chains for early stage startups"},"content":{"rendered":"\n

Today’s early-stage startups face numerous challenges. One of the most critical is ensuring the security of their software supply chain to build trust with customers. Recent reports suggest that by 2025, 45% of organizations will experience a supply chain cyberattack1<\/sup> and the total cost will reach $138 billion by 2031.2<\/sup>  <\/p>\n\n\n\n

As founders and technical experts, it’s essential to understand why software supply chain security matters, how to approach it, and what steps you can take to contribute to a more secure ecosystem. In this blog post, we’ll explore these aspects and highlight the role of the GitHub Secure Open Source Fund\ufffc<\/a> in supporting maintainers to improve security outcomes. <\/p>\n\n\n\n

Why software supply chain security matters<\/strong> <\/h2>\n\n\n\n

Software supply chain security is crucial for several reasons\u2014from protecting your business and your customers to compliance and regulation, and overall customer trust.  <\/p>\n\n\n\n

A security breach can have devastating consequences for your startup, including financial losses, reputational damage, and loss of customer trust. For some industries, there are strict security and compliance requirements. Ensuring your software supply chain is secure helps you meet these standards and avoid legal issues. Additionally, it is critical for navigating policies like Secure by Design<\/a> and the European Union Cyber Resilience Act<\/a>, and for long-term sustainability.  <\/p>\n\n\n\n

For all companies, customer trust is critical and users are increasingly concerned about the security of their data and information. Demonstrating a commitment to security can help build trust and differentiate your startup from competitors. You can hear a prime use case from Michael Vandi, a GitHub Accelerator Alumni, on how security helped differentiate his software and company.  <\/p>\n\n\n\n

\n
Watch the video: GitHub Secure Open Source Fund – Improving open source security<\/a><\/div>\n<\/div>\n\n\n\n

How to approach software supply chain security<\/strong> <\/h2>\n\n\n\n

To effectively secure your software supply chain, consider the following steps: <\/p>\n\n\n\n

    \n
  1. Identify and assess risks<\/strong>: Start by identifying the components of your software supply chain, including open source and third-party libraries, dependencies, and tools. Assess the risks associated with each component and prioritize them based on their potential impact. <\/li>\n<\/ol>\n\n\n\n
      \n
    1. Implement security best practices<\/strong>: Adopt security best practices beyond regular code reviews, automated testing, and continuous integration and continuous delivery (CI\/CD) pipelines like threat modeling, secure coding standards, and security testing at each stage of development. Ensure that your team is trained in secure coding practices like multifactor authentication, encryption, identifying and updating security patches, conducting comprehensive security audits and penetration testing, and stays up-to-date with the latest security trends. <\/li>\n<\/ol>\n\n\n\n
        \n
      1. Monitor and respond<\/strong>: Establish incident response plans, continuously monitor your software supply chain for vulnerabilities, and respond promptly to any security incidents. Use tools like dependency scanners and vulnerability management platforms to stay informed about potential cyberthreats. <\/li>\n<\/ol>\n\n\n\n
          \n
        1. Collaborate with the community: <\/strong>Engage with the security community and open-source communities to stay informed about the latest cyberthreats and updates, participate in security forums, and contribute to open-source security projects. <\/li>\n<\/ol>\n\n\n\n

          Contributing to a more secure ecosystem<\/strong> <\/h2>\n\n\n\n

          Today, organizations invest $7.7 billion across the entire open-source ecosystem annually.\u00b3 As a startup, not only do you have the opportunity to apply for the fund to support your open-source projects, but you can also play a vital role in improving software supply chain security by contributing back to the open-source community. One way to do this is by contributing to the newly launched<\/a> GitHub Secure Open Source Fund<\/a> backed with $1.25 million in funding from organizations, including startups like Vercel and Chainguard. This fund provides financial support to open-source maintainers, enabling them to receive training and guidance to enhance security outcomes. By investing in maintainers, you help ensure that the open-source components you rely on are secure and well-maintained.  <\/p>\n\n\n\n

          Additionally, you can contribute to the community by: <\/p>\n\n\n\n

            \n
          1. Reporting vulnerabilities<\/strong>: If you discover a vulnerability in an open-source project, report it responsibly to the maintainers. This helps improve the security of the project and benefits the entire ecosystem. <\/li>\n<\/ol>\n\n\n\n
              \n
            1. Contributing code<\/strong>: Contribute code to open-source projects, especially those that you depend on. This can include security patches, new features, or improvements to existing functionality. <\/li>\n<\/ol>\n\n\n\n
                \n
              1. Sharing knowledge<\/strong>: Share your knowledge and experiences with the community through blog posts, talks, and workshops. By educating others about software supply chain security, you help raise awareness and promote best practices. <\/li>\n<\/ol>\n\n\n\n

                Alongside the Github Secure Open Source Fund, Microsoft for Startups<\/a> also provides credits and technical support to the open-source community to improve security. Together, startups are empowered to learn more about how they can accelerate their open-source projects securely and sustainably.<\/p>\n\n\n\n

                What\u2019s to come<\/strong> <\/h2>\n\n\n\n

                Securing your software supply chain is a critical aspect of building a successful startup. By understanding the importance of software supply chain security, implementing best practices, and contributing back to the community, you can help create a more secure ecosystem for everyone. The GitHub Secure Open Source Fund<\/a> is an excellent resource to support maintainers and improve security outcomes, ultimately benefiting your startup and the broader tech community. <\/p>\n\n\n\n

                <\/p>\n\n\n\n

                \n
                Learn more about the GitHub Secure Open Source Fund <\/a><\/div>\n<\/div>\n\n\n\n

                Remember, security is a continuous journey, and staying vigilant is key to protecting your business and customers <\/p>\n\n\n\n

                \n\n\n\n

                1<\/sup> Gartner Identifies Top Security and Risk Management Trends for 2022<\/a>  
                2<\/sup>                 2023 Software Supply Chain Attack Report<\/a>  
                3<\/sup>                 2024 Open Source Software Funding Report<\/a><\/p>\n\n\n\n

                <\/p>\n","protected":false},"excerpt":{"rendered":"

                As founders and technical experts, it’s essential to understand why software supply chain security matters, how to approach it, and what steps you can take to contribute to a more secure ecosystem. In this blog post, we’ll explore these aspects and highlight the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes.<\/p>\n","protected":false},"author":63,"featured_media":2777,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","ms-ems-related-posts":[],"footnotes":""},"post_tag":[19],"content-type":[728,202],"job-role":[],"topic":[],"coauthors":[711],"class_list":["post-2772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","tag-azure","content-type-news","content-type-startup-stories","review-flag-1750334680-276","review-flag-1750334688-375","review-flag-1-1750334680-831","review-flag-2-1750334680-437","review-flag-3-1750334680-896","review-flag-7-1750334681-192","review-flag-gartn-1750334690-708","review-flag-new-1750334675-317","review-flag-watch-1750334687-676"],"yoast_head":"\nA guide to securing software supply chains for early stage startups - Microsoft for Startups Blog<\/title>\n<meta name=\"description\" content=\"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A guide to securing software supply chains for early stage startups - Microsoft for Startups Blog\" \/>\n<meta property=\"og:description\" content=\"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft for Startups Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Microsoft4Startups\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-06T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-30T20:15:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1260\" \/>\n\t<meta property=\"og:image:height\" content=\"575\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kevin Crosby\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\" \/>\n<meta name=\"twitter:creator\" content=\"@msft4startups\" \/>\n<meta name=\"twitter:site\" content=\"@msft4startups\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin Crosby\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/author\/kevin-crosby\/\",\"@type\":\"Person\",\"@name\":\"Kevin Crosby\"}],\"headline\":\"A guide to securing software supply chains for early stage startups\",\"datePublished\":\"2025-01-06T16:00:00+00:00\",\"dateModified\":\"2025-12-30T20:15:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\"},\"wordCount\":892,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\",\"keywords\":[\"Azure\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\",\"name\":\"A guide to securing software supply chains for early stage startups - Microsoft for Startups Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\",\"datePublished\":\"2025-01-06T16:00:00+00:00\",\"dateModified\":\"2025-12-30T20:15:49+00:00\",\"description\":\"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png\",\"width\":1260,\"height\":575,\"caption\":\"Enterprise office worker in focused work with a positive facial expression.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A guide to securing software supply chains for early stage startups\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/\",\"name\":\"Microsoft for Startups Blog\",\"description\":\"Startup insight and inspiration\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization\",\"name\":\"Microsoft for Startups Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2024\/11\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2024\/11\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft for Startups Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Microsoft4Startups\/\",\"https:\/\/x.com\/msft4startups\",\"https:\/\/www.linkedin.com\/company\/microsoftforstartups\/\",\"https:\/\/www.instagram.com\/microsoftforstartups\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/person\/f43e4478d0447b1a4d1fa052de1de172\",\"name\":\"Karina Buggy\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g06b8f5864156657680de8449c67a8705\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g\",\"caption\":\"Karina Buggy\"},\"url\":\"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/author\/kbuggy\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A guide to securing software supply chains for early stage startups - Microsoft for Startups Blog","description":"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/","og_locale":"en_US","og_type":"article","og_title":"A guide to securing software supply chains for early stage startups - Microsoft for Startups Blog","og_description":"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.","og_url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/","og_site_name":"Microsoft for Startups Blog","article_publisher":"https:\/\/www.facebook.com\/Microsoft4Startups\/","article_published_time":"2025-01-06T16:00:00+00:00","article_modified_time":"2025-12-30T20:15:49+00:00","og_image":[{"width":1260,"height":575,"url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","type":"image\/png"}],"author":"Kevin Crosby","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","twitter_creator":"@msft4startups","twitter_site":"@msft4startups","twitter_misc":{"Written by":"Kevin Crosby","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/author\/kevin-crosby\/","@type":"Person","@name":"Kevin Crosby"}],"headline":"A guide to securing software supply chains for early stage startups","datePublished":"2025-01-06T16:00:00+00:00","dateModified":"2025-12-30T20:15:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/"},"wordCount":892,"commentCount":0,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","keywords":["Azure"],"articleSection":["News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/","url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/","name":"A guide to securing software supply chains for early stage startups - Microsoft for Startups Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","datePublished":"2025-01-06T16:00:00+00:00","dateModified":"2025-12-30T20:15:49+00:00","description":"Explore the role of the GitHub Secure Open Source Fund in supporting maintainers to improve security outcomes. Learn more.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2025\/01\/Untitled.png","width":1260,"height":575,"caption":"Enterprise office worker in focused work with a positive facial expression."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/a-guide-to-securing-software-supply-chains-for-early-stage-startups\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/"},{"@type":"ListItem","position":2,"name":"A guide to securing software supply chains for early stage startups"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/","name":"Microsoft for Startups Blog","description":"Startup insight and inspiration","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#organization","name":"Microsoft for Startups Blog","url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2024\/11\/microsoft_logo.webp","contentUrl":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-content\/uploads\/2024\/11\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft for Startups Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Microsoft4Startups\/","https:\/\/x.com\/msft4startups","https:\/\/www.linkedin.com\/company\/microsoftforstartups\/","https:\/\/www.instagram.com\/microsoftforstartups\/"]},{"@type":"Person","@id":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/#\/schema\/person\/f43e4478d0447b1a4d1fa052de1de172","name":"Karina Buggy","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g06b8f5864156657680de8449c67a8705","url":"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/13c888475c29ea9a677186154f343b321ba3174dfa43577c4a9b5702c79f1a90?s=96&d=microsoft&r=g","caption":"Karina Buggy"},"url":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/author\/kbuggy\/"}]}},"bloginabox_animated_featured_image":null,"bloginabox_display_generated_audio":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/posts\/2772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/users\/63"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/comments?post=2772"}],"version-history":[{"count":9,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/posts\/2772\/revisions"}],"predecessor-version":[{"id":4692,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/posts\/2772\/revisions\/4692"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/media\/2777"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/media?parent=2772"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/post_tag?post=2772"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/content-type?post=2772"},{"taxonomy":"job-role","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/job-role?post=2772"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/topic?post=2772"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/startups\/blog\/wp-json\/wp\/v2\/coauthors?post=2772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}