Cequence unveils API Security Testing Suite for Generative AI applications

Company’s Unified API Protection platform offers full protection by testing for OWASP LLM Top 10 Threats, AI app vulnerabilities, visualising API traffic, boosting third-party API security, and autonomously detecting AI bot threats.

  • Monday, 12th August 2024 Posted 1 year ago in by Phil Alsop

Cequence has introduced 'revolutionary' advancements to its Unified API Protection (UAP) platform. These enhancements mark a significant milestone in API security, specifically tailored to support the secure use of AI applications like Generative AI and Large Language Models (LLMs). Cequence’s solutions protect applications deployed in the cloud, on-premises, and hybrid environments, and also support serverless environments, ensuring an uncompromised security posture.

“API security and bot management are more important than ever as AI technology grows,” said Ameya Talwalkar, CEO of Cequence. “As Generative AI and Large Language Models become more common, organisations face new types of attacks. While many cybersecurity companies use AI to protect against threats, Cequence is focusing on using AI to defend specifically against attacks targeting AI applications. This approach, called 'Cyber for AI,’ aims to set new standards in AI security and enhance overall cybersecurity.”

In today’s digital landscape, APIs serve as the backbone of countless applications, necessitating robust security measures. Cequence’s upgraded UAP platform introduces unparalleled capabilities for proactive threat detection, streamlined security testing, and autonomous threat mitigation, empowering organizations to fortify their API infrastructure with confidence.

Key enhancements to Cequence’s UAP platform include:

Testing LLM Applications for OWASP LLM Top 10 Threats

Cequence pioneers the industry’s first test suite to evaluate applications using Large Language Models (LLMs) against the OWASP LLM Top 10 threats.

Enables organisations to proactively test LLM applications using synthetic traffic to identify vulnerabilities and ensure security prior to deployment.

Provides specific findings and recommendations to developers for corrective actions.

Detecting and Blocking Automated AI Bot Activity

Cequence enhances capabilities to automatically identify and block AI bot activity without user configuration.

Automatically refreshes UAP’s global AI bot list, ensuring all customer deployments are continuously protected against the latest AI bot threats without requiring manual updates.

Enables security teams to effectively manage and mitigate AI bot-driven threats against exposed content.

Introducing the Cequence Flow Graph

Cequence launches a new graphing capability within the UAP platform, known as the Flow Graph.

Unlike other tools that provide a simple “read-only" view, the Flow Graph visualises end-to-end API flow, enabling personnel to take instant action on malicious flows.

Enhances security team visibility by distinguishing between normal and malicious traffic volumes.

New Integrations Enhance Discovery of Third-Party APIs

Expands integrations with F5 High Speed Logging (HSL), Citrix ADC Content Inspection, and WSO2 API Gateway for comprehensive API discovery.

Offloading API Analytics Intelligence to the Edge

Processes API traffic on-premises, optimising traffic flow to reduce costs and enhance efficiency while aligning with your API security needs, whether for discovery, governance or full protection.

Reduces bandwidth usage and enhances privacy by processing sensitive data closer to the edge.

Enables quicker, low-latency processing of API traffic for improved detection and response times.

Attack Surface Detection of API Gateways and Infrastructure

Automatically discovers and maps all API gateways and infrastructure, including those on cloud providers like AWS and Azure, ensuring comprehensive coverage.

Identifies and addresses hidden APIs operating in non-sanctioned environments to prevent security gaps.

Tailors detection algorithms to reduce false positives and enhance accuracy, aligning with your specific security needs.

Commvault partners with Delinea and Pinecone to enhance security and resilience for enterprises, centralising credential management and safeguarding...
New research highlights executive priorities amidst evolving pressures, showcasing the pivotal role of AI and automation within contemporary business...

Accelerating the next wave of AI-driven cybersecurity

Posted 2 days ago by Sophie Milburn
CrowdStrike, AWS, and NVIDIA join forces to fuel innovation in AI-driven cloud security.

Identity security meets real-time threat response

Posted 2 weeks ago by Sophie Milburn
SailPoint announces new integrations with CrowdStrike to bolster identity-based threat response, advancing security operations and decision-making...

Small businesses face rising cybersecurity attacks

Posted 2 weeks ago by Sophie Milburn
Nearly half of US SMBs faced cyberattacks, yet many remain underprepared and reliant on untrained staff for security, Guardz study finds.
TCS strengthens its alliance with Aviva by expanding its policy administration services, embracing advanced digital solutions for customer-focused...
Hammer teams up with Nexsan to offer storage solutions across EMEA, enhancing modern data management capabilities.

Nordic security expertise expands in Europe

Posted 3 weeks ago by Sophie Milburn
MetaCompliance expands its foothold in Europe by acquiring Nordic leader Junglemap, enhancing its capacity to offer advanced security and compliance...