Cequence Security announces new updates to its Unified API Protection (UAP) platform that enhances customer API discovery, risk management and protection capabilities.
Our latest capabilities enable organizations to rapidly deploy API security testing with built-in generative AI automation, protect users from online fraud, and operationalize security findings with low-code/no-code workflows. .
“We are always looking for ways to further automate and improve our UAP solutions to help our customers integrate the tools they need to stay ahead of threat actors,” said CEO Ameya Talwalkar. . “With our platform updates, we continue to differentiate ourselves from other point solution vendors in the API security space, offering our customers the only integrated best-of-suite approach to discover, comply, test and protect APIs. are provided to.”
“Today, we are proud to be the first API security vendor to leverage groundbreaking Generative AI and no-code security automation within our UAP solution to better protect users from online fraud and simplify security findings. I am pleased to share with you.” Tull Walker.
Enhance API Security Testing with Generative AI
With the huge potential of generative AI tools such as ChatGPT and Google Bard, Cequence was one of the first cybersecurity companies and one of the first API protection companies to harness the power to protect data and users from bad actors. is.
Cequence has added some new features to API security testing. This includes test plan generation using a new feature called intelligent mode that automates the generation of API security test plans using plain English and extends the low-code/no-code approach to test case generation. increase. .
Cequence UAP’s intelligent mode automatically associates the right API with the right test case, taking into account the functionality of the API. Not only does this dramatically reduce the time required to create a test plan from months to months with other solutions, it also ensures a consistent experience across customer applications and environments.
Several other enhancements include detailed insight into test failures and remediation workflows. The test catalog now includes the latest OWASP API Top 10 2023 test cases. Cequence allows the InfoSec team to run API tests outside of his CI/CD pipeline and instead run attack test suites directly against staging and production servers.
New anti-fraud features
To help organizations protect their APIs from online fraud, Cequence introduced an anti-fraud module to API Spartan. This new module will enable organizations to protect end customers from online fraud and instantly take actions such as blocking transactions and generating enterprise-level notifications to relevant teams.
Detect and block business logic abuse, account takeover attempts (ATO), top 10 common OWASP API security risks, and automated malicious traffic by protecting your applications and users from online fraud Complements the existing functionality of Cequence.
Operationalize API protection with low-code/no-code security automation
Cequence introduced out-of-the-box integrations with over 300 third-party apps, including ServiceNow, PagerDuty, JIRA, and Slack. Security analysts can use off-the-shelf connections to these apps to instantly forward security risks and threats to business teams for remediation.
Security analysts use a low-code/no-code approach within Cequence to implement workflows equivalent to API Security Orchestration and Response (SOAR) workflows, connecting multiple third-party connections to achieve desired outcomes can.
Using this approach, analysts can identify critical API security issues, such as discovering shadow APIs that can access sensitive data, and new security risks due to weak authentication and non-compliance with OpenAPI specifications in newly built pre-production CIs. Operate workflows to quickly remediate risks. /CD pipeline.
Enhanced visibility of external facing APIs with API Spyder
New enhancements to API Spyder make it easier for customers to identify APIs that are externally accessible but not fully protected by Cloud Security Posture Management (CSPM) infrastructure. Additionally, this approach seamlessly complements API Sentinel’s deep insight into runtime API inventory and compliance checks with OWASP API Security Top 10 and other custom risk categories.
Latest Unified API Protection platform updates help organizations protect users from online fraud, operationalize security results with workflows like low-code/no-code API SOAR, and accelerate API security testing with built-in generative AI automation can now be installed.
These features continue to differentiate Cequence from other API security, bot management, anti-fraud, and WAF vendors as it has the industry’s first and only integrated API protection platform that covers the entire API lifecycle. . With UAP, customers can discover with API Spyder, comply with API Sentinel, and protect with API Spartan.
