Scribd Logo
Upload

Welcome to Scribd!

  • Wallarm Cyber Security Solutions

    Uploaded by

    Roby Villanueva
    35 views16 pages
    The document discusses an API security platform that provides comprehensive protection for APIs. It discovers APIs, classifies sensitive data, assesses risk levels, and compares actual implementations to documentation. The platform protects APIs from all threats using signature-less detection across protocols. It provides visibility into attacks and automated response capabilities. The platform integrates with security and DevOps tools. It offers complete API and application security across multi-cloud environments using inline or out-of-band deployment options.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses an API security platform that provides comprehensive protection for APIs. It discovers APIs, classifies sensitive data, assesses risk levels, and compares actual implementations to documentation. The platform protects APIs from all threats using signature-less detection across protocols. It provides visibility into attacks and automated response capabilities. The platform integrates with security and DevOps tools. It offers complete API and application security across multi-cloud environments using inline or out-of-band deployment options.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    35 views16 pages

    Wallarm Cyber Security Solutions

    Uploaded by

    Roby Villanueva
    The document discusses an API security platform that provides comprehensive protection for APIs. It discovers APIs, classifies sensitive data, assesses risk levels, and compares actual implementations to documentation. The platform protects APIs from all threats using signature-less detection across protocols. It provides visibility into attacks and automated response capabilities. The platform integrates with security and DevOps tools. It offers complete API and application security across multi-cloud environments using inline or out-of-band deployment options.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 16

    End-to-End API Security

    The most complete API Security Platform that modern enterprises need

    1
    Company-wide Initiatives

    Cloud & Digital API Security Risk/Compliance


    transformation

    Cloud-native technology APIs Threat Landscape &


    Visibility to malicious traffic
    stack (K8s) Data Classification

    Missing / Insufficient Low performance


    Multi-Cloud / Tenancy
    API Protection (Latency, FS/FN)

    Zero-Trust API Discovery PCI & Open Banking

    3
    API traffic is unique

    New stack
    RESTful API Service Mesh Public & Service Mesh

    Serverless GraphQL Multi-Cloud Automatic API Discovery

    NoSQL Zero Trust Kubernetes Verify documentation

    jamstack Lambda gRPC Detect abuse & misuse

    Envoy HTTP/2 WebSockets Test for vulnerabilities (shift left)

    4
    Existing solutions fall short

    WAF is Not Enough API Gateways

    ● Designed to detect different types of ● Validate API documentations


    attacks
    ● Cover AuthN +AuthZ
    ● Each API traffic is unique
    ● Encryption
    ● Most WAFs missed 80% of the API
    ● Basic security - ACL, Rate Limiting
    specific threats

    5
    Discover
    API Inventory
    Reconstruct API specs, from actual application traffic

    API Data Classification


    ● Detect and mark sensitive data: Personal, Financial,
    Credentials Data
    ● Internal/External

    API Risk Score (Low/Mid/High)


    Usage, type of data, external/internal

    Compare of documentation
    Validate actual deployment vs. design and documents.

    Track API Drifts


    ● Get alerts for a new API or app.
    ● View Changes

    6
    Protect
    Support all protocols
    REST, SOAP, gRPC, graphQL, and
    WebSocket-based APIs.

    All Threats
    ● OWASP Top10, Top10 API
    ● API Abuse
    ● L7 DDoS, Bots

    Tuning Free
    Using grammar based libDetection
    open source and complement with ML.

    7
    Respond
    Visibility
    ● Drill down into malicious attacks
    ● Attacks insights
    ● Advanced Analysis

    Automated Response
    ● Smart triggers
    ● Active Threat Verification

    DevSecOps Tool Integrations


    SIEM,SOAR, Incident response,
    Observability tool integration available
    8
    Wallarm: complete API and Application Security Platform
    Wallarm is the only platform that unifies best-in-class API Security and WAAP (Next-gen WAF) solutions to protect
    your whole API and application portfolio in multi-cloud and cloud-native environment.

    Product: Product:

    API Security + WAAP / Next Gen WAF

    APIAPI
    Real-time Security
    API Discovery
    Testing
    Threat Prevention
    Sub-module

    Underlying shared platform capabilities and resources

    9
    Platform Architecture

    10
    Out-of-band
    ● Eliminate fears on an inline solution
    ● Receive same capabilities
    ● Detection mode
    ● Easier for PoV

    11
    Cloud Deployment

    12
    All Deployment Options

    13
    All DevSecOps tool Integrations
    Incident response SIEM Code Repo

    Communications SOAR Observability

    14
    Wallarm Differentiating Capabilities

    Reduce Risk of a Security Incident Harden Security Posture Increase Efficiency/Reduce Cost

    Signature-less detection
    Inline/Out-of-band Deployment
    Best-in-class Accuracy level (FS/FN). Passive Vulnerability Detection
    Full flexibility
    libProton + libDetection

    Full Protocol Support Integrations with security,


    Exposed assets discovery +
    SOAP, REST, gRPC, GraphQL, DevOps, and other tools
    vulnerability scanner
    WebSockets

    Deep Request Inspection Automated Rules


    Active Threat Verification
    URI, Headers & Body Low TCO

    15
    The Most Comprehensive
    API Security Solution
    Trusted by Fortune 500 and largest tech companies

    #1 API Security Solution by customer reviews at G2

    180B API requests protected, daily

    20,000+ Protected apps and APIs 16


    Questions?
    Adi Lavi
    VP Channel

    17

    You might also like