~Introducing practical security measures utilizing Source Code Analysis (SAST) and Open Source Component Analysis (SCA)~

G-Gravity Co., Ltd. (Headquarters: Minato-ku, Tokyo; Representative Director and CEO: Tomohiro Yamagata; hereinafter referred to as G-Gravity), a leader in public digital transformation, will be holding an event over two days, on September 28th (Monday) and 29th (Tuesday)."Three ways to inspect for vulnerabilities in critical systems in operation during the era of high-performance AI"We will be holding a webinar to explain this.

The rapid evolution and proliferation of high-performance AI is fundamentally shaking the foundations of traditional security operations. Among the most difficult and crucial challenges to address is vulnerability management for critical systems that possess characteristics such as "unstoppable (high availability)," "high confidentiality (confidentiality/isolated environment)," and "long-term operation (legacy assets)." This webinar will systematically explain three practical methods for vulnerability assessment in operational systems from the perspectives of source code analysis (SAST) and open-source component analysis (SCA).

This webinar is primarily intended for individuals and personnel from companies and organizations considering reviewing their security measures for their systems, those who want to efficiently identify vulnerabilities in systems currently in operation, those considering AI-driven development, and development and security departments (and their personnel) promoting DevSecOps.

In the first session, we will go beyond simply discussing the introduction of tools and delve deeply into important practical issues such as "What are the issues specific to critical systems?", "When should inspections be performed in the operating environment?", "How should the large number of detected alerts be prioritized?", and "How should we deal with code that is difficult to modify?". Furthermore, we will explain how to visualize security risks in the development and operation processes and streamline and enhance the process from vulnerability discovery and evaluation to response by utilizing Mend.io, the AI-driven AppSec platform provided by Z-Gravity.

Furthermore, starting with this webinar in September, G-Gravity plans to hold a series of webinars on a monthly basis, continuously introducing security concepts and specific countermeasures required for application development in the AI era.

The webinar overview isAttachmentThat's correct.

What is G-Gravity?
G-Gravity Co., Ltd. was established in June 2025 as an IT solutions company leading public DX in Japan. Focusing primarily on the public sector (government agencies), we provide comprehensive support for the introduction of the latest technologies, from consulting to construction and implementation, with a speed unmatched by large corporations. Headquartered in Minato-ku, Tokyo, as a specialist company supporting government and administrative DX, we have central government ministries and agencies as our main clients, and we conduct our business with the aim of being "a company that is rooted in society and acts as a pivotal force, like gravity, for steadily moving forward into the future."

What is Mend io?
Mend.io (Boston, Massachusetts, USA) is a proven AppSec platform established in 2011. It scans all components of a system, including code, open-source software, containers, and AI, as well as their interactions, during the development phase, enabling early identification and management of vulnerabilities and risks. While many competing products focus on managing only the code layer or the AI layer, mend.io integrates both functionalities at a high level, earning high praise from external organizations such as Gartner and Forrester, and demonstrating its exceptional capabilities.