Software supply chain security
Identify open-source and third-party components, assess their provenance, vulnerabilities and licenses, and support SBOM management and open-source compliance.
ABOUT SOFTSAFE TECH
Software and AI security
Software quality and security testing for supply chains, development and AI applications
About us
COMPANY OVERVIEW
About SoftSafe Tech
Founded in May 2021 and registered in Chengdu High-tech Zone, SoftSafe Tech focuses on software quality and security testing across software supply chains, software development and AI.
We provide software composition analysis, static code analysis, fuzz testing, binary analysis and AI security testing products and services for automotive, semiconductors, industrial control & telecommunications, financial services, advanced manufacturing and AI applications.
From open-source and third-party components to source code, software deliverables and AI applications, our analysis and testing methods help development and security teams identify risks, assess software quality and support compliance workflows.
OUR EXPERTISE
Our expertise
Software development security
Combine static analysis, AI-assisted code review and fuzz testing to assess code quality, find security defects and test unexpected behavior during development.
AI security
Test models, agents and related components for security issues, and analyze their supply chains to identify dependencies and potential risks in AI applications.
QUALIFICATIONS & RECOGNITION
Qualifications and recognition
Select a certificate or plaque to view the original
Product certification and capability assessment
TÜV NORD functional safety tool certification
TÜV NORD
StatiCode V2.8.0 IEC 61508 tool class T2 ISO 26262:2018 Part 8 §11 IEC 61508:2010 Part 3 §7.4.4
Trusted open-source governance tool assessment
China Academy of Information and Communications Technology
Software composition analysis tool, SaaS V3.1 SCA capability assessment for open-source governance
Software supply chain security capability
China Cybersecurity Review, Certification and Market Regulation Big Data Center
SoftSafe Tech Open-source code security evaluation capability for software products, assessed against GB/T 43848-2024
Membership certificates and plaques
TC260 WG9 member
Secretariat of the National Technical Committee 260 on Cybersecurity of SAC
SBOM working group member
Laboratory of Open Source Risk Evaluation and Control Technology
OpenCenter open-source compliance working group founding member
CAICT · Cloud Computing Open Source Industry Alliance
Cloud-based large-model security initiative
China Academy of Information and Communications Technology
Standards participation
National standard for SBOM data formats (source, opens in a new tab)
One of the principal drafting organizations for GB/T 47020-2026, the national standard for Software Bill of Materials data formats
Software supply chain management standard (source, opens in a new tab)
Participated in drafting T/CECC 39—2025, a group standard for software supply chain management
Ecosystem participation
AUTOSEMO senior member (source, opens in a new tab)
Senior member of the China Automotive Basic Software Ecosystem Committee
OpenChain project participation (source, opens in a new tab)
Participation in the Linux Foundation’s OpenChain project and open-source compliance ecosystem
OIN 2.0 community participation (source, opens in a new tab)
Participation in the Open Invention Network 2.0 community and open-source patent ecosystem
Multimodal AI industry consortium (source, opens in a new tab)
Consortium membership supporting AI industry exchange and collaboration
Chengdu Confidentiality Association member (source, opens in a new tab)
Membership approved in July 2026
Industry recognition
CCIA industry recognition 2024 (source, opens in a new tab)
Named in CCIA’s 2024 list of promising companies in China’s cybersecurity industry
Shanghai cybersecurity innovation catalog 2025 (source, opens in a new tab)
The AI+ static code analysis tool was included in the annual catalog of cybersecurity innovation outcomes
CCSIP cybersecurity industry panorama 2024 (source, opens in a new tab)
Included in the SAST, software composition analysis and fuzz testing categories
4hou cybersecurity industry landscape 2025 (source, opens in a new tab)
Included in categories such as software composition analysis, SAST and fuzz testing
INDUSTRY EXPERIENCE
Software security in practice
Supply chain and code security for intelligent driving
SourceSeer SCA and StatiCode SAST support Horizon Robotics in intelligent-driving software security, including open-source governance, software supply chain security and code quality assessment.
SCASAST
Static analysis for cockpit and embedded software
StatiCode was selected for VOYAH’s static analysis project for cockpit and embedded automotive software, integrating automated checks and incremental analysis into code review and continuous integration.
SASTContinuous integration
CUSTOMERS & PARTNERS
Customers and partners
OUR LOCATIONS
Our locations
Chengdu
Operations and R&D center
19/F, Jiayu Financial Technology Center, No. 166 Mingdu Road, Wuhou District, Chengdu
Wuhan
R&D center
Room 1001, Mingfeng Building, No. 355 Guanshan Avenue, Hongshan District, Wuhan
Beijing
Ecosystem collaboration center
Room 1709, Beihuan Center, No. 18 Yumin Road, northeast of Madian Bridge, Xicheng District, Beijing
Shanghai
Ecosystem collaboration center
Room 907, Tower B, Hailiang Building, No. 12, Lane 118 Zhongjiang Road, Putuo District, Shanghai
Shenzhen
Office
9/F, Tower B, TCL Building, No. 6 Gaoxin South 1st Road, Nanshan District, Shenzhen
Hong Kong
Ecosystem collaboration center
GET IN TOUCH
Let’s talk software security
Get in touch for product inquiries, technical discussions or business collaboration