Supply Chain Defense detects malicious and compromised package files on every server running Monarx. Whether those files are automatically remediated depends on two settings.
The short answer: Turn on Active Protection, then enable Supply Chain Defense under Enterprise → Settings → On Disk Remediation.
Step 1: Make Sure Active Protection Is On
Supply Chain Defense remediation runs on top of Active Protection Mode. If Active Protection is off (detect only), nothing is remediated automatically, including Supply Chain Defense findings.
Active Protection can be enabled server-wide or for specific users. See Overview of Per-User Active Protection for user-level setup.
Step 2: Enable Supply Chain Defense Remediation
Log in to the Monarx Web App.
Go to Enterprise → Settings → On Disk Remediation.
Enable Supply Chain Defense.
Save your changes.
📷 [Screenshot to add: On Disk Remediation settings with the Supply Chain Defense option]
📔 Note: Agent-level or user-level overrides may apply. If a server or user is configured differently from your enterprise default, that override takes precedence.
What Happens Once It's On
Malicious package files are quarantined.
Compromised package files are cleaned when a clean version is available.
Files that can't be cleaned safely stay detected so you can review them.
Remediation works on individual files. It does not upgrade or reinstall the package, so the application owner may still need to update the affected dependency.
Why Do I See Supply Chain Defense Detections When It's Turned Off?
Detection and remediation are separate. Monarx always records Supply Chain Defense findings so you have visibility into threats on your servers, even if you have chosen not to remediate them automatically. Turning remediation off never hides detections.