THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Enterprise Security Magazine
Cequence Security
A Revolutionary Approach to Application Security
Larry Link, President & CEOWith the Bot Age taking shape, the Internet is already flooded with bots that are getting smarter every day. “Malicious bots now account for nearly one-third of all traffic on the Internet, making it the new leading cyber threat facing today’s hyper-connected enterprise,” says Larry Link, President and CEO of Cequence Security, and a seasoned executive with over 25 years of experience creating, building and managing profitable enterprise technology businesses.
While the reliance on web, mobile, and API application services continues to increase for facilitating business process and connecting to customer, partners, and suppliers, malicious bots are targeting such applications to launch account takeover (ATO), API/ business logic abuse, fake account creation, site scrapping and similar attacks. With tools, infrastructure, and lists of compromised credentials easily available on the dark web today, these advanced bot attacks are a step ahead of legacy security tools and first-generation bot defense tools. While attackers are constantly upping their game, the question is how do leaders secure their hyper-connected enterprise?
Cequence Security has the answer, providing an application security barrier between bad actors and businesses with its application security platform (ASP), powered by data science and machine learning. “When old school techniques like IP address blocking and JavaScript injection fail to safeguard businesses, we protect clients’ applications with our patented AI-powered solution,” says Link. The company recognizes the threat of automated attacks facing financial firms, media organizations, and e-commerce sites, gaming companies, and healthcare institutions.
Cequence ASP can be deployed on premises, in the cloud, across any number of locations.
The platform has three integrated modules—CQAI, CQ Manage, and CQ Connect. The CQAI analytics engine leverages advanced machine learning and analyzes metadata collected from the client, application, and network transactions. “CQAI learns whether the transaction was benign or not and understands the heuristics of the transaction up to application layer,” adds Link. The analysis involves the determination of user and application behavior, header, protocol and the underlying intent of the transaction. Without requiring any application modifications like other tools, the Cequence solution passively zeroes in on malicious bot activities to detect and defend against attacks.
CQAI learns whether the transaction was benign or not and understands the heuristics of the transaction upto application layer
With CQ Manage, enterprises can easily leverage insights into malicious bot activity detected by CQAI, then perform real-time blocking, rate limiting, and active attack deception. They can use policies to defend IT infrastructure and respond differently for each application in the event of a security threat. While security products are often considered as isolated “black boxes,” CQ Connect brings in a high level of integration with the third party solutions. CQ Connect allows users to custom connect and share information with SIEMs, anti-fraud systems, and other devices.
The company’s advanced ASP has already fortified the security posture of numerous clients across various verticals and F500 companies. A credit card processing firm had sought a solution to protect its suite of hundreds of applications against the backdrop of 2,000 compromises every day with the cost of each breach ranging from $500 to $1500 per record. After deploying Cequence ASP, the client was able to reduce the compromises to 10 percent of the earlier figure and financial losses. Eventually, the credit card processing firm succeeded in proactively mitigating security risks.
Cequence Security is poised for significant growth over next couple of years. Besides adding more capabilities in data science, the company aims to introduce more advanced application security functions to its scalable software platform.
Company
Cequence Security
Management
Larry Link, President & CEO
Description
Delivers highly automated, application security software solutions
Cequence Security News
Cequence Named “Best-in-Class” in Datos Insights API Security Solutions Report
Cequence Takes the Lead in Using Machine Learning (ML) to Tackle AI-Backed Attacks
Enhancements to company’s flagship Unified API Protection platform save 90% of security analysts’ time, enabling simultaneous threat hunting across multiple APIs
SAN FRANCISCO -Cequence, announced multiple ML-powered advancements to its Unified API Protection (UAP) platform at the RSA Conference. With this groundbreaking release, Cequence introduces industry-leading ML-based security features, revolutionizing how organizations defend their digital assets in the AI era.
“API usage is soaring, yet many organizations grapple with securing it effectively,” said Ameya Talwalkar, CEO of Cequence. “As API threats escalate, CISOs and software engineering leaders face mounting pressure to strengthen their defenses against increasingly sophisticated attacks leveraging AI. Attackers are harnessing AI capabilities to launch more targeted and evasive assaults, heightening the urgency for robust security measures. Our industry-leading innovations in ML-based security features set a new standard for safeguarding against these evolving threats against applications and their APIs. Cequence remains committed to empowering businesses with innovative solutions to navigate the complexities of API security and bot management in the face of AI-driven adversarial tactics.”
In today’s digital landscape, where APIs are the backbone of countless applications and services, ensuring robust security has never been more critical. Cequence’s latest upgrades to its UAP product suite represent a seismic shift in API security. These advancements offer unparalleled visibility, streamlined testing and autonomous threat mitigation capabilities.
Empowering organizations to proactively safeguard their API infrastructure with confidence, Cequence’s solutions automate the detection of API management status, tailor security testing to unique business needs, and leverage ML-driven threat detection and mitigation. By equipping businesses with these tools, Cequence enables them to stay ahead of evolving threats and protect against data breaches and business disruptions. These game-changing enhancements are poised to redefine API security and are essential for any organization committed to protecting digital assets.
With the latest advancements to its innovative platform, Cequence now enhances:
Automated Threat Detection and Mitigation
• Automatic Rule, Model & Policy Generation: Leveraging ML capabilities, the system automatically identifies anomalous or malicious traffic patterns, generating rules, models, and policies for immediate attack mitigation. This ensures continuous protection, even during off-peak hours.
• Efficient ML-Aided Response: The ML-aided response system dramatically lightens the workload for analysts by automating tasks. Every time the system processes data, it can be up to 90% faster, saving about 1 hour each time. This boosts overall efficiency.
• Enhanced Parallel Threat Hunting: The system allows for simultaneous threat hunting activities across multiple API endpoints. By analyzing various fingerprints and threat patterns concurrently, it accelerates the detection and mitigation process, ensuring robust security posture.
Customized API Discovery
• Automated API Management Identification: Spyder automatically detects API hosts managed by vendors like MuleSoft, Apigee, and AWS API Gateway, providing instant insights into your API ecosystem’s management status with zero deployment or configuration changes.
• Tailored API Definitions: Organizations can customize API definitions to match their specific usage and requirements, ensuring accurate categorization and protection of critical APIs.
• Personalized Precision Discovery Algorithm: Tailor the discovery algorithm to specifically pinpoint API hosts of interest, such as those associated with particular product teams or hosting AI applications. This customization streamlines threat detection and response processes.
Bespoke API Security Testing
• Tailor-made API Security Test Plans: Sentinel enables the creation of customized API security test plans tailored to unique business needs, enhancing the effectiveness of security testing efforts.
• Flexible Authentication Profiles: Configure authentication profiles to test APIs using multiple user personas and privileges, ensuring thorough security validation across diverse user scenarios.
• Adaptive Test Cases: Customize test cases to generate diverse attack traffic profiles per API group, adapting testing strategies to varied threat scenarios and bolstering overall security posture.
Venky Ganesan, partner at Menlo Ventures, said: “With APIs at the forefront of modern business applications, Cequence's innovative technologies, such as real-time attack detection and discovery of AI applications, are crucial for addressing the challenges posed by the development and use of distributed APIs. By bridging the API-awareness gap inherent in traditional solutions, Cequence empowers organizations to effectively defend against evolving cybersecurity risks. As one of the leading investors in the AI stack, we stand behind Cequence as they redefine industry standards and safeguard digital assets."
Carlos Morales, SVP solutions at Vercara, said: “Vercara is delighted to partner with Cequence to deliver continuous innovation in API security. With new advanced ML capabilities, Cequence's technology empowers organizations to protect their digital assets proactively. UltraAPI, Vercara's new API security service, powered by Cequence, is the perfect complement to our market leading DDoS, WAF, and DNS platform to safeguard our customers' on-line presence."
SAN FRANCISCO -Cequence, announced multiple ML-powered advancements to its Unified API Protection (UAP) platform at the RSA Conference. With this groundbreaking release, Cequence introduces industry-leading ML-based security features, revolutionizing how organizations defend their digital assets in the AI era.
“API usage is soaring, yet many organizations grapple with securing it effectively,” said Ameya Talwalkar, CEO of Cequence. “As API threats escalate, CISOs and software engineering leaders face mounting pressure to strengthen their defenses against increasingly sophisticated attacks leveraging AI. Attackers are harnessing AI capabilities to launch more targeted and evasive assaults, heightening the urgency for robust security measures. Our industry-leading innovations in ML-based security features set a new standard for safeguarding against these evolving threats against applications and their APIs. Cequence remains committed to empowering businesses with innovative solutions to navigate the complexities of API security and bot management in the face of AI-driven adversarial tactics.”
In today’s digital landscape, where APIs are the backbone of countless applications and services, ensuring robust security has never been more critical. Cequence’s latest upgrades to its UAP product suite represent a seismic shift in API security. These advancements offer unparalleled visibility, streamlined testing and autonomous threat mitigation capabilities.
Empowering organizations to proactively safeguard their API infrastructure with confidence, Cequence’s solutions automate the detection of API management status, tailor security testing to unique business needs, and leverage ML-driven threat detection and mitigation. By equipping businesses with these tools, Cequence enables them to stay ahead of evolving threats and protect against data breaches and business disruptions. These game-changing enhancements are poised to redefine API security and are essential for any organization committed to protecting digital assets.
With the latest advancements to its innovative platform, Cequence now enhances:
Automated Threat Detection and Mitigation
• Automatic Rule, Model & Policy Generation: Leveraging ML capabilities, the system automatically identifies anomalous or malicious traffic patterns, generating rules, models, and policies for immediate attack mitigation. This ensures continuous protection, even during off-peak hours.
• Efficient ML-Aided Response: The ML-aided response system dramatically lightens the workload for analysts by automating tasks. Every time the system processes data, it can be up to 90% faster, saving about 1 hour each time. This boosts overall efficiency.
• Enhanced Parallel Threat Hunting: The system allows for simultaneous threat hunting activities across multiple API endpoints. By analyzing various fingerprints and threat patterns concurrently, it accelerates the detection and mitigation process, ensuring robust security posture.
Customized API Discovery
• Automated API Management Identification: Spyder automatically detects API hosts managed by vendors like MuleSoft, Apigee, and AWS API Gateway, providing instant insights into your API ecosystem’s management status with zero deployment or configuration changes.
• Tailored API Definitions: Organizations can customize API definitions to match their specific usage and requirements, ensuring accurate categorization and protection of critical APIs.
• Personalized Precision Discovery Algorithm: Tailor the discovery algorithm to specifically pinpoint API hosts of interest, such as those associated with particular product teams or hosting AI applications. This customization streamlines threat detection and response processes.
Bespoke API Security Testing
• Tailor-made API Security Test Plans: Sentinel enables the creation of customized API security test plans tailored to unique business needs, enhancing the effectiveness of security testing efforts.
• Flexible Authentication Profiles: Configure authentication profiles to test APIs using multiple user personas and privileges, ensuring thorough security validation across diverse user scenarios.
• Adaptive Test Cases: Customize test cases to generate diverse attack traffic profiles per API group, adapting testing strategies to varied threat scenarios and bolstering overall security posture.
Venky Ganesan, partner at Menlo Ventures, said: “With APIs at the forefront of modern business applications, Cequence's innovative technologies, such as real-time attack detection and discovery of AI applications, are crucial for addressing the challenges posed by the development and use of distributed APIs. By bridging the API-awareness gap inherent in traditional solutions, Cequence empowers organizations to effectively defend against evolving cybersecurity risks. As one of the leading investors in the AI stack, we stand behind Cequence as they redefine industry standards and safeguard digital assets."
Carlos Morales, SVP solutions at Vercara, said: “Vercara is delighted to partner with Cequence to deliver continuous innovation in API security. With new advanced ML capabilities, Cequence's technology empowers organizations to protect their digital assets proactively. UltraAPI, Vercara's new API security service, powered by Cequence, is the perfect complement to our market leading DDoS, WAF, and DNS platform to safeguard our customers' on-line presence."
Cequence Security Crowned Leader in API Security by Cybersecurity Excellence Awards
Cequence Unified API Protection sets industry standard as the only offering addressing all phases of the API security lifecycle
Cequence, announced it has been recognized as a w***** in the API Security category by the 2024 Cybersecurity Excellence Awards. The award hails Cequence’s cutting-edge Unified API Protection (UAP) platform, praising its ability to eliminate unknown and unmitigated API security risks that lead to data loss, fraud, and business disruption.
Cequence’s UAP platform empowers organizations with unmatched visibility, enabling them to fortify their defenses and reap the business advantages of secure applications and ubiquitous API connectivity. This industry-leading solution achieves this through autonomous threat discovery, native inline response, and eliminating reliance on third-party tools for seamless protection.
“This recognition from the Cybersecurity Excellence Awards fuels our passion for pioneering API security solutions,” said Varun Kohli, CMO at Cequence Security. “With over 8 billion daily API calls secured and 3 billion user accounts protected, Cequence empowers organizations to embrace the future of secure APIs. Our UAP platform represents more than a solution—it signifies a paradigm shift in API security.”
Cequence’s Unified API Protection platform comprises three functional pillars: attack surface discovery, security compliance and security testing, and bot management and fraud prevention.
Attack Surface Discovery: Reveals an organization’s API attack surface and the vulnerabilities they represent by discovering external APIs across managed and unmanaged API infrastructure, identifying those APIs having issues.
Security Compliance & Security Testing: Enables security and development teams to work collaboratively to address surfaced security issues for both pre- and post-production APIs that could lead to exploits.
Bot Management & Fraud Prevention: Safeguards organizations against a broad spectrum of bot attacks to prevent data loss, theft, and fraud.
In May, Cequence set a new standard for API security solutions with the announcement of its industry-leading ML-based security features. These product updates revolutionized how organizations defend their digital assets in the AI era. By integrating generative AI automation into its API security testing, Cequence enables no-code workflows, streamlines deployment, and has made a significant leap in security automation.
“We congratulate Cequence Security on being recognized as an award w***** in the API Security category of the 2024 Cybersecurity Excellence Awards,” said Holger Schulze, CEO of Cybersecurity Insiders and founder of the 600,000-member Information Security Community on LinkedIn, which organizes the 9th annual Cybersecurity Excellence Awards. “With over 600 entries across more than 300 categories, the awards are highly competitive. Your achievement reflects outstanding commitment to the core principles of excellence, innovation, and leadership in cybersecurity.”
Cequence, announced it has been recognized as a w***** in the API Security category by the 2024 Cybersecurity Excellence Awards. The award hails Cequence’s cutting-edge Unified API Protection (UAP) platform, praising its ability to eliminate unknown and unmitigated API security risks that lead to data loss, fraud, and business disruption.
Cequence’s UAP platform empowers organizations with unmatched visibility, enabling them to fortify their defenses and reap the business advantages of secure applications and ubiquitous API connectivity. This industry-leading solution achieves this through autonomous threat discovery, native inline response, and eliminating reliance on third-party tools for seamless protection.
“This recognition from the Cybersecurity Excellence Awards fuels our passion for pioneering API security solutions,” said Varun Kohli, CMO at Cequence Security. “With over 8 billion daily API calls secured and 3 billion user accounts protected, Cequence empowers organizations to embrace the future of secure APIs. Our UAP platform represents more than a solution—it signifies a paradigm shift in API security.”
Cequence’s Unified API Protection platform comprises three functional pillars: attack surface discovery, security compliance and security testing, and bot management and fraud prevention.
Attack Surface Discovery: Reveals an organization’s API attack surface and the vulnerabilities they represent by discovering external APIs across managed and unmanaged API infrastructure, identifying those APIs having issues.
Security Compliance & Security Testing: Enables security and development teams to work collaboratively to address surfaced security issues for both pre- and post-production APIs that could lead to exploits.
Bot Management & Fraud Prevention: Safeguards organizations against a broad spectrum of bot attacks to prevent data loss, theft, and fraud.
In May, Cequence set a new standard for API security solutions with the announcement of its industry-leading ML-based security features. These product updates revolutionized how organizations defend their digital assets in the AI era. By integrating generative AI automation into its API security testing, Cequence enables no-code workflows, streamlines deployment, and has made a significant leap in security automation.
“We congratulate Cequence Security on being recognized as an award w***** in the API Security category of the 2024 Cybersecurity Excellence Awards,” said Holger Schulze, CEO of Cybersecurity Insiders and founder of the 600,000-member Information Security Community on LinkedIn, which organizes the 9th annual Cybersecurity Excellence Awards. “With over 600 entries across more than 300 categories, the awards are highly competitive. Your achievement reflects outstanding commitment to the core principles of excellence, innovation, and leadership in cybersecurity.”
Cequence Security, the leading provider of Unified API Protection (UAP), today announced the company has been recognized as a “best-in-class” solution in the Datos Insights Vendor Evaluation: API Security Solutions report, earning one of the highest product scores in the history of Datos Insights vendor evaluation reports.
The Datos Insights Vendor Evaluation is an in-depth analysis and voice of the customer of API security solutions. Participants of the report represent startups and public companies that submitted API security solutions and completed a comprehensive 200-point company, customer and product questionnaire, provided a product demo and submitted customer references.
Cequence is rated as a “best-in-class” solution across all four evaluation components, including vendor stability, client strength, client service and product features. The report highlights that Cequence’s Unified API Protection Platform displays the maturity and efficacy customers should expect and receive from cybersecurity investments. With the CQ Prime Threat Research team at the core of product development, Cequence keeps up with the latest API threats and attackers, providing actionable intelligence to customers to improve API security posture through advanced threat hunting.
“Cequence has scored the highest vendor score in the history of Datos Insights producing industry evaluation reports and has grown to be one of the most respected API protection vendors. Datos Insights believes that organizations selecting Cequence will receive the advertised value and more from the product, stay on the leading edge of threat intelligence and substantially reduce their API risk,” said Tari Schreider, Strategic Advisor, Datos Insights.
The report indicates that Cequence has an API protection solution to match where any organization is in the API security journey, leading to a fully managed unified API protection platform. Additionally, Cequence’s managed API security offering removes the heavy lifting and burden of protecting APIs from organizations with limited resources and API knowledge.
Marketing Technology News: MarTech Interview with Jennifer Griffin Smith, Chief Market Officer at Acquia
The Cequence Unified API Protection (UAP) platform, is the only solution that unifies discovery, compliance and protection across all internal and external APIs to defend against fraud, business logic attacks, exploits and unintended data leakage. The UAP solution is comprised of the following:
• API Spyder: Proactively discover all external and internal APIs that could expose your organization to data loss, compliance violations or system compromise. All without deploying any software or traffic flow modifications.
• API Sentinel: Achieve API security posture management. Understand your security risks, obtain API compliance and test for OWASP API Top 10 vulnerabilities.
• API Spartan: Prevent targeted attacks, business logic abuse and fraud without any code instrumentation. Track attackers no matter how quickly they retool and thwart detection.
“We are honored to earn a best-in-class designation from Datos Insights and to hear that our customers are enthusiastic about our platform and appreciate our company’s emphasis on transparency and accessibility,” said Varun Kohli, CMO of Cequence. “This recognition is a testament to our commitment to providing our customers with real value that gives them the leading edge in threat intelligence to help substantially reduce their API risk.”