trustedoss · haksungjang · Aug 4, 2026 · Aug 4, 2026
diff --git a/README.md b/README.md
@@ -4,7 +4,7 @@
 
 <h1 align="center">TRUSCA</h1>
 
-<p align="center"><em>TrustedOSS SCA — open-source software composition analysis</em></p>
+<p align="center"><em>Trusted SCA — open-source software composition analysis</em></p>
 
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
 [![Release](https://img.shields.io/badge/release-v0.12.0-0f766e.svg)](CHANGELOG.md)
@@ -13,7 +13,7 @@
 
 > Open-source enterprise SCA portal — manage CVEs, license compliance, and SBOMs in one self-hosted UI.
 
-**TRUSCA** — the SCA tool of the [TrustedOSS](https://trustedoss.github.io/) initiative — is an Apache-2.0 licensed, self-hosted alternative to commercial Software Composition Analysis (SCA) products. It unifies vulnerability tracking (CVE), license compliance, and Software Bill of Materials (SBOM) management for engineering and legal teams.
+**TRUSCA** (short for Trusted SCA) is an Apache-2.0 licensed, self-hosted alternative to commercial Software Composition Analysis (SCA) products. It unifies vulnerability tracking (CVE), license compliance, and Software Bill of Materials (SBOM) management for engineering and legal teams.
 
 > **🔭 Live demo:** **[trusca-demo.duckdns.org](https://trusca-demo.duckdns.org)** — a public, read-only demo seeded with real projects, scans, CVEs, licenses, and SBOMs. Sign in as `[email protected]` / `DemoTest2026!` (the same password works for every seeded account). Writes are disabled and the dataset resets nightly; you can also upload a CycloneDX SBOM to the **Demo Sandbox** project and watch it matched against licenses and CVEs. See [Live demo](https://trustedoss.github.io/trusca/docs/installation/live-demo).
 

diff --git a/actions/scan/README.md b/actions/scan/README.md
@@ -1,6 +1,6 @@
-# TrustedOSS SCA Scan — GitHub Action
+# TRUSCA Scan — GitHub Action
 
-Composite GitHub Action that triggers a TrustedOSS SCA scan, waits for it to
+Composite GitHub Action that triggers a TRUSCA scan, waits for it to
 finish, evaluates the build gate, and (on pull requests) posts the SCA report
 back to the PR.
 
@@ -13,7 +13,7 @@ SCA tool ships, on Apache-2.0 self-hosted infra.
 ## Quick start
 
 ```yaml
-name: TrustedOSS SCA
+name: TRUSCA SCA
 on:
   pull_request:
   push:
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: TrustedOSS SCA scan
+      - name: TRUSCA SCA scan
         uses: trustedoss/scan-action@v1
         with:
           api-url: https://trustedoss.example.com

diff --git a/actions/scan/action.yml b/actions/scan/action.yml
@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright 2026 TRUSCA contributors
-name: 'TrustedOSS SCA Scan'
-description: 'Trigger a TrustedOSS scan and gate the build on Critical CVEs / forbidden licenses.'
+name: 'TRUSCA Scan'
+description: 'Trigger a TRUSCA scan and gate the build on Critical CVEs / forbidden licenses.'
 author: 'TrustedOSS'
 branding:
   icon: 'shield'
@@ -280,7 +280,7 @@ runs:
 
         # Job summary block — visible on the workflow run page.
         {
-          echo "## TrustedOSS SCA Gate"
+          echo "## TRUSCA Gate"
           echo ""
           echo "| Field | Value |"
           echo "|---|---|"

diff --git a/apps/frontend/src/components/BrandLockup.tsx b/apps/frontend/src/components/BrandLockup.tsx
@@ -2,16 +2,15 @@
 // Copyright 2026 TRUSCA contributors
 /**
  * BrandLockup — the full TRUSCA logo: mark + "TRUSCA" wordmark + the
- * "TrustedOSS SCA" tagline (the SCA tool of the TrustedOSS initiative).
+ * "Trusted SCA" tagline, which is what the name expands to.
  *
  * Used where there is vertical room (the auth gateway, brand showcase).
  * Tight surfaces — the 48 px sidebar / header — use the reduced lockup
  * (BrandMark + BrandWordmark, no tagline).
  *
- * The tagline is a brand string (not translated) and is NOT uppercased —
- * the umbrella name "TrustedOSS" keeps its camel casing. Its colour uses the
- * theme's muted-foreground token (passes WCAG AA), while the mark gradient
- * and the teal wordmark are fixed brand colours.
+ * The tagline is a brand string (not translated) and is NOT uppercased. Its
+ * colour uses the theme's muted-foreground token (passes WCAG AA), while the
+ * mark gradient and the teal wordmark are fixed brand colours.
  */
 import { BrandMark } from "@/components/BrandMark";
 import { BrandWordmark } from "@/components/BrandWordmark";
@@ -46,7 +45,7 @@ export function BrandLockup({
             onInk ? "text-topbar-muted-foreground" : "text-muted-foreground",
           )}
         >
-          TrustedOSS SCA
+          Trusted SCA
         </span>
       </div>
     </div>

diff --git a/apps/frontend/src/locales/en/auth.json b/apps/frontend/src/locales/en/auth.json
@@ -89,7 +89,7 @@
     "rate_limited": "Too many attempts. Please wait a moment."
   },
   "gateway": {
-    "pitch": "Open-source risk for the whole portfolio — vulnerabilities, licences and SBOMs in one place.",
+    "pitch": "Know what open source you run and where the risk is — vulnerabilities, licences and SBOMs.",
     "trust": {
       "hosting": "Apache-2.0 and self-hosted: your source and your findings stay on your own infrastructure.",
       "sources": "Vulnerability data from NVD, OSV and GHSA, with EPSS scores and the CISA known-exploited catalogue.",

diff --git a/apps/frontend/src/locales/ko/auth.json b/apps/frontend/src/locales/ko/auth.json
@@ -89,7 +89,7 @@
     "rate_limited": "시도 횟수가 많습니다. 잠시 후 다시 시도하세요."
   },
   "gateway": {
-    "pitch": "오픈소스 위험을 포트폴리오 단위로 봅니다 — 취약점 · 라이선스 · SBOM.",
+    "pitch": "어떤 오픈소스를 쓰고 있고 무엇이 위험한지 파악합니다 — 취약점 · 라이선스 · SBOM.",
     "trust": {
       "hosting": "Apache-2.0 라이선스이며 직접 설치해 운영합니다. 소스 코드와 스캔 결과가 사내 인프라 밖으로 나가지 않습니다.",
       "sources": "취약점 데이터는 NVD · OSV · GHSA를 사용하고, EPSS 점수와 CISA 악용 목록(KEV)을 함께 반영합니다.",

diff --git a/docs-site/docs/intro.md b/docs-site/docs/intro.md
@@ -9,9 +9,8 @@ slug: /intro
 
 # TRUSCA
 
-**TRUSCA** — the SCA tool of the [TrustedOSS](https://trustedoss.github.io/)
-initiative — is a self-hosted, Apache-2.0 Software Composition
-Analysis (SCA) platform. It unifies CVE tracking, license compliance, and
+**TRUSCA** (short for Trusted SCA) is a self-hosted, Apache-2.0 Software
+Composition Analysis (SCA) platform. It unifies CVE tracking, license compliance, and
 SBOM management in a single web UI — without the per-seat licensing of
 commercial products.
 

diff --git a/docs-site/i18n/ko/code.json b/docs-site/i18n/ko/code.json
@@ -6,7 +6,7 @@
     "message": "Apache-2.0 · 자체 호스팅 · v0.19.2"
   },
   "homepage.hero.subtitle": {
-    "message": "TrustedOSS의 SCA 도구, TRUSCA — 취약점, 라이선스 컴플라이언스, SBOM을 하나의 자체 호스팅 UI에서. 시트당 라이선스 비용 없음."
+    "message": "Trusted SCA — 취약점, 라이선스 컴플라이언스, SBOM을 자체 호스팅 UI 하나에서 관리합니다. 좌석당 라이선스 비용이 없습니다."
   },
   "homepage.hero.cta.quickstart": {
     "message": "Quickstart — 5분"

diff --git a/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md b/docs-site/i18n/ko/docusaurus-plugin-content-docs/current/intro.md
@@ -9,11 +9,10 @@ slug: /intro
 
 # TRUSCA
 
-**TRUSCA**는 [TrustedOSS](https://trustedoss.github.io/)의 SCA 도구로,
-자체 호스팅이 가능한 Apache-2.0 라이선스의 SCA
-(Software Composition Analysis) 플랫폼입니다. CVE 추적, 라이선스 컴플라이언스,
-SBOM 관리를 한 화면에서 통합 제공하며, 상용 제품의 좌석당 라이선스 비용 없이
-운영할 수 있습니다.
+**TRUSCA**는 Trusted SCA에서 온 이름으로, 자체 호스팅이 가능한
+Apache-2.0 라이선스의 SCA(Software Composition Analysis) 플랫폼입니다.
+CVE 추적, 라이선스 컴플라이언스, SBOM 관리를 한 화면에서 통합 제공하며,
+상용 제품의 좌석당 라이선스 비용 없이 운영할 수 있습니다.
 
 ## 시작 지점
 

diff --git a/docs-site/src/pages/index.tsx b/docs-site/src/pages/index.tsx
@@ -22,9 +22,8 @@ function HomepageHero(): ReactNode {
         <h1 className={styles.heroTitle}>{siteConfig.title}</h1>
         <p className={styles.heroSubtitle}>
           <Translate id="homepage.hero.subtitle">
-            The SCA tool of the TrustedOSS initiative — vulnerabilities,
-            license compliance, and SBOMs in one self-hosted UI. No per-seat
-            licensing.
+            Trusted SCA — vulnerabilities, license compliance, and SBOMs in
+            one self-hosted UI. No per-seat licensing.
           </Translate>
         </p>
         <div className={styles.heroCtas}>

diff --git a/templates/gitlab-ci.yml b/templates/gitlab-ci.yml
@@ -1,6 +1,6 @@
-# TrustedOSS SCA — GitLab CI template
+# TRUSCA — GitLab CI template
 # =============================================================================
-# Triggers a TrustedOSS SCA scan, polls until it finishes, evaluates the build
+# Triggers a TRUSCA scan, polls until it finishes, evaluates the build
 # gate, posts the SCA report to the MR (when running on a merge_request_event
 # pipeline), and exits non-zero on gate failure so the pipeline turns red.
 #