10076676TrueDeployClosedCollaborative R&DISCFThe way in which we develop, supply, and secure software is often weak and lacks digital trust. The dominance of open-source software and the interconnectedness of software between organisations has raised cybersecurity risks in the software supply chain. Recent cyber-attacks (SolarWinds, Kaseya) and vulnerabilities in open-source code (Log4j, Spring4Shell) have created a sense of panic about security across the software supply chain. Current methods of developing, supplying and securing software are inadequate, resulting in increased cybersecurity risks. TrueDeploy eliminates these risks by using distributed ledger technology to track and account for each software element throughout the development process, guaranteeing the authenticity and integrity of each element. This technology also allows us to audit the software supply chain and detect any potential vulnerabilities. TrueDeploy also simplifies the process of developing, supplying and securing software, allowing organisations to quickly access the software elements they need while ensuring they are secure and up-to-date. This reduces the time and cost associated with the development process, making it easier for organisations of all sizes to deploy new software. Hence, TrueDeploy brings trust and transparency to the software supply chain. We will do this with a novel combination of blockchain, credential management, and access control technologies.