Sparrow, 'Sparrow SAST/SAQT' Registered on Public Procurement Service Digital Service Mall

[Asia Economy Reporter Hyungsoo Park] Sparrow, a source code security vulnerability and quality inspection tool, announced on the 18th that its secure coding tool ‘Sparrow SAST/SAQT v5.6E,’ which analyzes security vulnerabilities and quality defects in software source code, has been registered in the Public Procurement Service Digital Service Mall. It has obtained the National Intelligence Service CC certification and the Korea Information and Communication Technology Association GS certification, recognizing the product's excellence and reliability.

Sparrow SAST/SAQT provides a navigator that accurately indicates the location of detected source code vulnerabilities and allows tracing of their causes. It offers detailed explanations of the discovered vulnerabilities along with examples of fixes and solutions, enabling rapid remediation. It is also available as plugins for various integrated development environment (IDE) tools such as Eclipse, IntelliJ, and Visual Studio, offering excellent usability.

It supports more than 20 major programming languages including Java, C/C++, Python, and Kotlin, as well as over 10 frameworks such as the e-Government Standard Framework and Spring Framework. It provides diagnostic criteria that must be followed when building information systems for government and public institutions, including 49 items from the Ministry of the Interior and Safety’s revised software security vulnerability diagnosis guide last year, the Defense Acquisition Program Administration’s weapon system software coding rules, National Intelligence Service vulnerabilities, and CWE. Security weaknesses can be inspected based on major domestic and international compliances.

Jang Ilsu, CEO of Sparrow, said, "Secure coding has become an essential security measure for all software," adding, "Through registration with the Public Procurement Service, we will support more government and public institutions in adopting secure coding to minimize security vulnerabilities."