Softcamp said Tuesday that its subsidiary RedPenSoft's operational server security solution, "XSCAN Server Runtime," has signed a third-party unit price contract with the Public Procurement Service and been registered on the National Procurement Service.
Accordingly, public institutional investors and local governments can purchase the product from the National Procurement Service without a separate competitive bidding process. RedPenSoft developed the product, while Softcamp is responsible for its registration on the National Procurement Service and supply to the public market.
XSCAN Server Runtime identifies not only software installed on servers currently in operation but also components that are currently running or loaded, generating a "Runtime SBOM (Software Bill of Materials at runtime)."
It analyzes the execution status and change history of software for each server and selects vulnerabilities that are highly likely to impact the operating environment. It is explained that security personnel can use this information to determine the priority of vulnerability remediation measures.
The system can also be deployed in closed networks and network-segregated environments used by public and financial institutional investors. Key assets and analysis information can be controlled within the customer's internal environment, and it has previously obtained GS certification Level 1 for software quality.
As the government pushes to institutionalize the SBOM system in the public sector with a goal of 2027, Softcamp and RedPenSoft plan to expand their software supply chain security business targeting public institutional investors, leveraging this registration on the National Procurement Service.
Bae Hwan-guk, CEO of Softcamp, stated, "This registration on the National Procurement Service marks a turning point for officially expanding our software supply chain security business into the public market," and added, "We will support customers in accurately identifying and continuously managing software risks in their actual operating environments."
in TECH
