Checkmarx announced a new generation in software supply chain security with its Secrets Detection and Repository Health solutions to minimize application risk.
Traceable AI announced an Early Access Program for its new Generative AI API Security capabilities.
As enterprises increasingly integrate Generative AI such as Large Language Models (LLMs) into critical applications, they expose those applications to attacks that exploit the unique characteristics of AI, such as prompt injection, insecure outputs, and sensitive data disclosure. Traceable addresses this urgent cybersecurity challenge directly: protecting the APIs that power connections between LLMs and other application services and users.
By launching Generative AI API Security capabilities in Early Access, Traceable extends its comprehensive API security platform to specifically target the security risks of integrating Generative AI into applications.
Key Features and Capabilities Include:
- New Generative AI API Security Dashboard: A dedicated dashboard allows organizations to gain insights into the security posture of Generative AI APIs within their applications.
- Discovery and Cataloging of Generative AI APIs: Traceable enables comprehensive discovery and cataloging of Generative AI APIs, facilitating a complete assessment of the API ecosystem.
- LLM API Vulnerability Testing: Rigorous vulnerability testing tailored for LLM APIs assists in identifying and mitigating vulnerabilities unique to LLM applications.
- Monitoring of Traffic to and from LLM APIs: Real-time monitoring and analysis of traffic to and from LLM APIs enable swift detection and response to emerging threats.
- Identification and Blocking of Sensitive Data Flows: Traceable's platform offers mechanisms for identifying and blocking sensitive data flows to Generative AI APIs, safeguarding critical data assets.
- Proactive Detection of Vulnerabilities and Threats Outlined in the OWASP LLM Top 10: Identify and block threats included in the OWASP LLM Top 10, including prompt injection, sensitive data exposure, insecure output handling, and model denial of service.
“Ensuring the security of applications powered by Generative AI and Large Language Models is crucial in today’s organizations,” said Sanjay Nagaraj, co-founder and CTO at Traceable. “With the introduction of our Generative AI API Security capabilities, we are helping enterprises to embrace the potential of AI technologies while securing their API ecosystem. Having collaborated closely with our customers, we understand the critical importance of addressing the unique security challenges posed by LLM-powered applications. We are excited to provide organizations with the capabilities required to navigate the complexities of AI-driven innovation with confidence and trust.”
Industry News
SmartBear has appointed Dan Faulkner, the company’s Chief Product Officer, as Chief Executive Officer.
Horizon3.ai announced the release of NodeZero™ Kubernetes Pentesting, a new capability available to all NodeZero users.
Veracode acquired certain assets of Phylum, including its malicious package analysis, detection, and mitigation technology.
AppViewX announced the completion of its acquisition by Haveli Investments.
Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.