SSR's SolidStep SCA Earns GS Level 1 Certification from TTA
SSR's open-source vulnerability analysis tool SolidStep SCA, formerly OPEN-RAY XG, received GS certification level 1 from TTA.
SSR announced that its open-source vulnerability analysis solution, SolidStep SCA, has obtained GS certification level 1 from TTA, according to datanet.co.kr.
SolidStep SCA identifies open-source components used during software development and analyzes and manages open-source licenses along with known vulnerability information.
The product is a renamed version of the company's existing OPEN-RAY XG.
SSR is an information security company that diagnoses and manages security vulnerabilities across applications, IT infrastructure, and open-source environments. In July 2024, it signed a share acquisition agreement with application security firm TrinitySoft, making it a subsidiary, and as of April 28, 2026, it fully absorbed and merged TrinitySoft.
The company currently provides SolidStep CCE·CVE, VADA CCE·CVE, MetiEye, CodeRay XG, ScanRay XG, and SolidStep SCA.
Quick answers
What is SolidStep SCA?
It is an open-source vulnerability analysis solution that identifies open-source components used in software development and analyzes and manages open-source licenses and known vulnerability information.
What certification did SolidStep SCA receive?
It obtained GS certification level 1 from TTA.
Is SolidStep SCA a new product?
It is a renamed version of the existing OPEN-RAY XG product.