Credentials & Recognition

SoftSafe Tech listed for SAST, SCA and fuzz testing in CCSIP 2024 panorama

SoftSafe Tech selects the SAST, SCA and fuzz testing domains for the 7th edition of CCSIP 2024

SoftSafe Tech was included in the CCSIP 2024 Seventh Edition for SAST, SCA, and fuzz testing areas. These areas correspond to source code defect analysis, third-party component and license governance, and behavior validation through abnormal input.

The CCSIP China Cybersecurity Industry Panorama 2024 Seventh Edition was released by FreeBuf Consulting and compiles vendor and product information based on cybersecurity capabilities. The document reflects the results of research and categorization, with specific product capabilities needing to be evaluated in conjunction with actual versions and use scenarios.

CCSIP 2024 Seventh edition of China's Internet Safety Industry Panorama
7th edition of CCSIP 2024 China Cybersecurity Industry Panorama

Three areas of recognition

SoftSafe Tech appears at static application security testing SAST, software composition analysis SCA and fuzz testing. They correspond to the source-code gap analysis, the governance of third-party components and licences, and the conduct of the certification process through abnormal input.

Static application security testing section in the CCSIP panorama
Static application security testing (SAST)

SoftSafe Tech showcased its SAST, SCA, and fuzz testing capabilities at the CCSIP 2024 panorama. The Software Composition Analysis (SCA) section focuses on third-party components, versions, dependencies, known vulnerabilities, and license information. Results from the SCA need to be combined with actual usage and release methods to form risk and compliance judgments.

Software composition analysis section in the CCSIP panorama
Software composition analysis (SCA)

SoftSafe Tech will continue to enhance its products for static application security testing (SAST), software composition analysis (SCA), and fuzz testing, aligning with the company's focus on software supply chains, code analysis, and validation. The company will also provide corresponding technical support in conjunction with enterprise development processes.

Back to news