Sparrow Selected for 5 Consecutive Years in SME Cloud Service Promotion and Expansion Project

Sparrow has been selected as a supplier for the '2024 Small and Medium Business Cloud Service Distribution and Expansion Project' for the fifth consecutive year. Through this project, Sparrow provides the SaaS-based application security vulnerability analysis solution, 'Sparrow Cloud,' and small and medium enterprises selected as demand companies can receive partial usage fee support.

The Small and Medium Business Cloud Service Distribution and Expansion Project is an initiative by the Ministry of Science and ICT and the National IT Industry Promotion Agency to support domestic SMEs' cloud-based digital transformation by subsidizing cloud adoption costs and consulting. Sparrow, selected as a supplier for five consecutive years, will provide Sparrow Cloud through this project to enhance software vulnerability security for SMEs.

Sparrow Cloud is the only cloud-based security service in Korea that can analyze both source code security weaknesses (SAST) and web vulnerabilities (DAST) together. SMEs that develop and supply software can use Sparrow Cloud to analyze software based on major security vulnerability inspection standards such as the Ministry of the Interior and Safety’s 'Software Development Security Guide.' By referring to vulnerability resolution methods and analysis reports, they can address vulnerabilities and strengthen product safety.

Starting in May, Sparrow plans to add a component analysis (SCA) service that provides license and vulnerability information for open-source software in use and can generate SBOM (Software Bill of Materials). A review consulting service for true and false positive detections of identified vulnerabilities will also be provided. This is expected to be a great opportunity for SMEs struggling with a lack of professional personnel and experience to significantly enhance their software security capabilities.

Jang Ilsu, CEO of Sparrow, explained, "As software supply chain attacks have emerged as the biggest issue in the IT and security industries, we plan to add the component analysis service in May to strengthen software supply chain security using Sparrow Cloud." He added, "By adopting Sparrow Cloud through the Cloud Voucher Project, the component analysis service and true/false positive review consulting will be provided free of charge for the duration of the adoption period."