Cequence Releases API Security Testing Suite for GenAI
August 06, 2024

Cequence introduced advancements to its Unified API Protection (UAP) platform, specifically tailored to support the secure use of AI applications like Generative AI and Large Language Models (LLMs).

Cequence’s solutions protect applications deployed in the cloud, on-premises, and hybrid environments, and also support serverless environments, ensuring an uncompromised security posture.

“API security and bot management are more important than ever as AI technology grows,” said Ameya Talwalkar, CEO of Cequence. “As Generative AI and Large Language Models become more common, organizations face new types of attacks. While many cybersecurity companies use AI to protect against threats, Cequence is focusing on using AI to defend specifically against attacks targeting AI applications. This approach, called ‘Cyber for AI,’ aims to set new standards in AI security and enhance overall cybersecurity.”

Cequence’s upgraded UAP platform introduces capabilities for proactive threat detection, streamlined security testing, and autonomous threat mitigation, empowering organizations to fortify their API infrastructure with confidence.

Key enhancements to Cequence’s UAP platform include:

■ Testing LLM Applications for OWASP LLM Top 10 Threats

- Cequence pioneers the industry’s first test suite to evaluate applications using Large Language Models (LLMs) against the OWASP LLM Top 10 threats.

- Enables organizations to proactively test LLM applications using synthetic traffic to identify vulnerabilities and ensure security prior to deployment.

- Provides specific findings and recommendations to developers for corrective actions.

■ Detecting and Blocking Automated AI Bot Activity

- Cequence enhances capabilities to automatically identify and block AI bot activity without user configuration.

- Automatically refreshes UAP’s global AI bot list, ensuring all customer deployments are continuously protected against the latest AI bot threats without requiring manual updates.

- Enables security teams to effectively manage and mitigate AI bot-driven threats against exposed content.

■ Introducing the Cequence Flow Graphflo

- Cequence launches a new graphing capability within the UAP platform, known as the Flow Graph.

- Unlike other tools that provide a simple “read-only” view, the Flow Graph visualizes end-to-end API flow, enabling personnel to take instant action on malicious flows.

- Enhances security team visibility by distinguishing between normal and malicious traffic volumes.

■ New Integrations Enhance Discovery of Third-Party APIs

- Expands integrations with F5 High Speed Logging (HSL), Citrix ADC Content Inspection, and WSO2 API Gateway for comprehensive API discovery.

■ Offloading API Analytics Intelligence to the Edge

- Processes API traffic on-premises, optimizing traffic flow to reduce costs and enhance efficiency while aligning with your API security needs, whether for discovery, governance or full protection.

- Reduces bandwidth usage and enhances privacy by processing sensitive data closer to the edge.

- Enables quicker, low-latency processing of API traffic for improved detection and response times.

■ Attack Surface Detection of API Gateways and Infrastructure

- Automatically discovers and maps all API gateways and infrastructure, including those on cloud providers like AWS and Azure, ensuring comprehensive coverage.

- Identifies and addresses hidden APIs operating in non-sanctioned environments to prevent security gaps.

- Tailors detection algorithms to reduce false positives and enhance accuracy, aligning with your specific security needs.

Share this

Industry News

January 22, 2025

Postman announced the Postman AI Agent Builder, a suite empowering developers to quickly design, test, and deploy intelligent agents by combining LLMs, APIs, and workflows into a unified solution.

January 22, 2025

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced the graduation of CubeFS.

January 21, 2025

BrowserStack and Bitrise announced a strategic partnership to revolutionize mobile app quality assurance.

January 21, 2025

Render raised $80M in Series C funding.

January 16, 2025

Mendix, a Siemens business, announced the general availability of Mendix 10.18.

January 16, 2025

Red Hat announced the general availability of Red Hat OpenShift Virtualization Engine, a new edition of Red Hat OpenShift that provides a dedicated way for organizations to access the proven virtualization functionality already available within Red Hat OpenShift.

January 16, 2025

Contrast Security announced the release of Application Vulnerability Monitoring (AVM), a new capability of Application Detection and Response (ADR).

January 15, 2025

Red Hat announced the general availability of Red Hat Connectivity Link, a hybrid multicloud application connectivity solution that provides a modern approach to connecting disparate applications and infrastructure.

January 15, 2025

Appfire announced 7pace Timetracker for Jira is live in the Atlassian Marketplace.

January 14, 2025

SmartBear announced the availability of SmartBear API Hub featuring HaloAI, an advanced AI-driven capability being introduced across SmartBear's product portfolio, and SmartBear Insight Hub.

January 14, 2025

Azul announced that the integrated risk management practices for its OpenJDK solutions fully support the stability, resilience and integrity requirements in meeting the European Union’s Digital Operational Resilience Act (DORA) provisions.

January 14, 2025

OpsVerse announced a significantly enhanced DevOps copilot, Aiden 2.0.

January 13, 2025

Progress received multiple awards from prestigious organizations for its inclusive workplace, culture and focus on corporate social responsibility (CSR).

January 13, 2025

Red Hat has completed its acquisition of Neural Magic, a provider of software and algorithms that accelerate generative AI (gen AI) inference workloads.

January 13, 2025

Code Intelligence announced the launch of Spark, an AI test agent that autonomously identifies bugs in unknown code without human interaction.