The 2026 TPN STAR Report
The insights and actions for today’s content supply chain.
Our data program
STAR: Security Trends, Analytics and Readiness
More alerts in six months than in all of last year. The response has to move faster.
Every TPN assessment produces data on where controls actually fail. We aggregate it, strip out anything identifying, and publish what it shows, so the industry can see which gaps are most common and prioritize accordingly.
The inaugural 2026 STAR Report found that most organizations have the foundational policies in place, but inconsistent day-to-day execution of technical controls is creating systemic, exploitable risk. The weakest-performing areas were vulnerability management, cryptography, endpoint hardening and access management, the same areas showing the highest non-compliance, the most deferred or refused remediation, and the slowest timelines. Meanwhile we issued more Security Alerts in the first quarter of 2026 than in all of 2025, driven by credential attacks, misconfigurations and unpatched vulnerabilities. The gaps attackers are using are the ones organizations believe they have already covered.
What’s in the Report
The STAR Report draws on aggregated, anonymized data from more than a thousand completed TPN assessments to show where the content supply chain is strong, where it is exposed, and which control failures track most closely to real security incidents.
- Assessment data from more than 1,000 completed TPN assessments across 60+ countries
- The control failures that appear most often, and how they map to reported content security incidents
- Security preparedness broken out by region, service category, and membership level
- Recommended actions for service providers and content owners heading into the next assessment cycle
Download the Report
The 2026 TPN STAR Report is free and open to everyone, with no registration required. If you have any questions or require assistance, please contact support@ttpn.org.