Njordium Cyber Group AB has introduced Inspect360 Code, a platform built to unify software supply chain security and vulnerability management at a time when European regulators are demanding faster, provable responses to exploited flaws.
The new offering gives organisations a live picture of the components sitting inside the software they develop, procure and ship. It identifies which vulnerabilities touch those components and confirms whether each issue has been resolved.
Inspect360 Code maintains a current inventory for every product, screens it against fresh vulnerability disclosures on an ongoing basis, and judges each flaw in light of how the product is genuinely constructed and deployed.
Fixes are monitored against timelines tied to business criticality. Each assessment and decision is logged alongside its rationale, giving boards, auditors and regulators a clear evidence trail.
The launch tackles a widespread problem. Modern software relies heavily on open-source libraries, frameworks and code supplied by third parties. When a new flaw is disclosed, the hard part is establishing whether it reaches a given product, who must respond, and whether remediation has happened. Many firms still rely on spreadsheets, scan outputs and email exchanges with suppliers to work this out.
Njordium points to recent incidents to illustrate the stakes. In October, attackers tampered with refrigeration systems at hundreds of French supermarkets, and a further wave on 2 November struck grocers in several other European markets, including ICA and Coop outlets in Sweden, ruining stock and interrupting trade.
Over the same period, critical PHP vulnerabilities were exploited in the wild, with hundreds of PHP-based products flagged as possibly exposed. The company stresses that Inspect360 Code does not defend industrial systems or networks, but instead addresses these questions for the software an organisation builds, ships and relies upon.
Regulation adds urgency. Since 11 September 2026, the EU Cyber Resilience Act has obliged manufacturers to issue an early warning within 24 hours of learning about an actively exploited vulnerability in their products, while NIS2 compels organisations to control risks stemming from suppliers. Inspect360 Code supplies the inventory, assessments and records to support those obligations, covering software from external vendors too.
Njordium Cyber Group operates the Inspect360 platform, where Inspect360 Code now sits beside Inspect360 GRC and Inspect360 TPRM, broadening coverage from the organisation and its supply base to the software it delivers.
The platform complements existing security testing tools. Customers can run it as a managed service hosted in European data centres, in an alternative hosting location, or on-premises within their own infrastructure.
Njordium Cyber Group CEO Mads Becker Jørgensen said, “Knowing that a vulnerability exists is not the same as knowing whether it affects something you deliver. Inspect360 Code connects the inventory, the assessment and the response, and makes the reasoning visible.”
Njordium Cyber Group senior advisor Kim Haverblad added, “An organisation cannot outsource its responsibility for the products it delivers. Inspect360 Code shows what is actually inside a product, release by release, so supplier assurance becomes something that can be checked rather than taken on trust.”
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
