Sparrow Registers 'App Security Testing Integrated Solution' with Public Procurement Service

Sparrow has registered its application (app) security testing integrated solution, 'Sparrow Enterprise v1.0', on the Public Procurement Service's Digital Service Mall.

According to Sparrow on July 13, Sparrow Enterprise is an integrated app security testing solution that provides source code vulnerability and quality defect analysis, web vulnerability analysis, and open-source vulnerability and license analysis in a single environment. It enables the identification and prevention of potential security vulnerabilities throughout the software development lifecycle in advance, and supports automated analysis by integrating with development environments such as CI and CD.

In addition, the solution can automatically generate SBOMs in international standard formats such as SPDX and CycloneDX, and the generated SBOMs can be registered in Sparrow Enterprise to visualize the components of the software (SW). Through this, public institutions can establish a supply chain security system based on SBOMs, proactively preparing for future strengthened SBOM management and supply chain risk management requirements. A management portal is also provided to control the import of open-source components depending on whether vulnerabilities exist, enabling risks to be verified and blocked in advance.

Sparrow Enterprise is offered with platform, user account, and analysis permission licenses, allowing customers to purchase according to project size and number of users. The platform is divided into 'Ultimate', which has no limit on the number of analyzable projects, and 'Standard', which has a limit.

Jang Ilsu, CEO of Sparrow, stated, "Software supply chain security has now become an area that must be continuously managed not only during the development phase but also throughout the introduction and operation stages. Through Sparrow Enterprise, we will actively support public institutions in establishing a stable supply chain security system and securing software visibility based on SBOMs, thereby creating a safer development and operation environment."

This content was produced with the assistance of AI translation services.