Indusface, a pioneer application security SaaS company that continually detects security risks, provides real-time protection and improves the performance of Websites and Applications, announced that it is adding Risk-Based API Protection to its WAAP platform, AppTrana.
APIs are the lifeline of the digital economy with many companies adopting the API-first approach. However, the growth of APIs is also opening up new risk vectors that they are not aware of. According to Gartner, more than 90% of applications have more attack surface exposed through API than UI and by 2022, API Abuse will move from an infrequent to the most-frequent attack vector, resulting in data breaches for enterprise web applications.
API Protection capabilities
Indusface is revolutionising the API security space by building on its API Protection capabilities. The company is doing so through the most comprehensive API protection to date by extending its risk-based approach to the same.
Authority comment
Speaking about this, Ashish Tandon, Founder and CEO, Indusface, said, "AppTrana's risk-based approach is unique and something that resonates with our customers. What customers are really interested in is knowing how well their application is protected based on the risk posture of their application."
"Building on this, we are now enhancing our API Protection capabilities by providing a risk-based approach to API security which we believe would revolutionise the market."
" With this, customers will be able to identify vulnerabilities found in their public APIs and quickly correlate how these are protected through API-specific policies and positive security policies applied in AppTrana providing the most comprehensive protection for APIs."
The weakest link
One can protect only what they know and protection is as strong as the weakest link
As with any security, one can protect only what they know and protection is as strong as the weakest link. The major challenges with APIs are discoverability and the ability to understand the context of APIs so that security can be tailored accordingly.
It is to address these challenges that Indusface is enhancing its API protection in AppTrana. Collectively through a multi-step approach, customers get to discover APIs, understand risk posture and ensure comprehensive protection of APIs.
Things one gets from AppTrana
With Indusface AppTrana's Risk-based API Protection, one gets:
- To understand the risk posture of the APIs through unlimited automated API scans including manual tests for identifying business logic vulnerabilities. This enables organisation to understand the weakest links of the APIs and get clear visibility around how these links are protected.
- Visibility into API traffic patterns and discovery of shadow APIs, so that you are no longer blindsided by what you don't know
- To protect APIs with API-specific rules written specifically to protect against OWASP Top 10 API vulnerabilities
- Behavioural-based protection against DDoS attacks on APIs by analysing API traffic pattern
- Behavioural-based protection against BOT attacks
- Positive security for APIs through analysis of swagger (OpenAPI 2.0) files and creation of automated positive security policies
- Accurate, real-time view of vulnerabilities blocked by API specific rules, positive security policies, custom rules and those that need fixes in the application
