SecuLayer, SK Shields team with KISA on supply chain security pilot
SecuLayer will build an AI-based SBOM analysis engine and automated vulnerability response platform, with SK Shields validating it on live monitoring infrastructure.
SecuLayer said on October 28, 2026 that it has formed a consortium with SK Shields to take part in a KISA demonstration project to build a software supply chain security model, according to datanet.co.kr.
Under the project, SecuLayer will develop an AI-based SBOM analysis engine and an automated vulnerability response platform. SK Shields will verify the technology using its actual monitoring infrastructure and operating environment, and will work on optimising the operating model.
The platform links VEX, the standard for exchanging information on whether a vulnerability can be exploited. SBOM and VEX data flow in both directions between the development and supply stage and the operations and monitoring stage.
SecuLayer is applying AIBOM to manage AI model components, training data and licence information, and plans to extend the scope of management to XBOM.
The consortium aims to complete simulated penetration testing and threat response scenario validation within the year and then distribute a supply chain security reference model.
Wider SBOM push
The project is part of the 2026 software supply chain security model support programme run by the Ministry of Science and ICT and KISA, and is based on KISA's software supply chain security guidelines and technical support. Use of SBOM has been expanding around measures such as US Executive Order 14028 and the European Cyber Resilience Act.
Quick answers
What will SecuLayer develop in the KISA project?
An AI-based SBOM analysis engine and an automated vulnerability response platform.
What is SK Shields' role in the consortium?
It will verify the technology and optimise the operating model using its actual monitoring infrastructure and operating environment.
What is planned by the end of the year?
The consortium plans to finish simulated penetration testing and threat response scenario validation and distribute a supply chain security reference model.