Within a supply chain, it is important to understand the vulnerabilities of a vendor. Open-source intelligence (OSINT), or publicly available information, was used to evaluate the suppliers of a defense contractor for weaknesses in security and create a cyber hygiene score. By developing a cyber hygiene score based on the results of OSINT searches, companies are able to better evaluate the security of their distributors and decrease the chance of a supply chain attack.