RESCALE Whitepaper: GRiSP.io - Building Trust in Cloud-to-Edge Software Through Automated Security Assessment

Abstract

This whitepaper presents the RESCALE pilot implementation with Peer Stritzinger GmbH (PST), a German SME developing the GRiSP ecosystem, including GRiSP.io, a cloud-hosted SaaS platform for cloud-to-edge computing and device management. The document describes how RESCALE was integrated into the GRiSP.io software development workflow to introduce automated security assessment capabilities and evidence-based trust mechanisms. The pilot focused specifically on the GRiSP.io software platform, enabling static and dynamic security analysis through the CI pipeline and generating structured security evidence through SSCG, DSCG, and Trusted Bill of Materials (TBOM) artefacts. The whitepaper presents the security challenges addressed, the integration of RESCALE into the existing development workflow, the introduction of automated dynamic security testing, and the role of verifiable security evidence in distributed cloud-to-edge environments. The results demonstrate how RESCALE can complement existing software development and testing practices by introducing repeatable security-focused runtime analysis, structured evidence generation, and mechanisms supporting future evidence-backed trust across distributed software ecosystems.