CloudVector introduces API Threat Protection with automated and continuous discovery

CloudVector announced launch of its namesake solution, which discovers, monitors and secures APIs to prevent data breaches. The proliferation of APIs have encouraged threat actors to target this new attack vector, increasing the risk of major data breaches. 

Existing Web Application Firewall (WAF) and API Management gateways are unable to provide API Threat Protection because of inherent limitations in their architectures.

To move beyond the gateway, CloudVector encourages organizations to adopt an API Threat Protection solution that is able to automatically discover APIs, monitor for deviant behavior, and secure data from exfiltration. CloudVector is the first API Threat Protection platform to deliver this full feature set.

CloudVector is purpose-built for modern application architectures, and is deployed with zero impact to inline performance, with no changes required to applications or DevOps processes. In fact, CloudVector eliminates the need for manual API specification to deliver immediate time to value.

The CloudVector’s API Threat Protection platform include discover with API Inspection Modules (AIM) that provide fully automated microsensor modules enable the continuous discovery of all APIs connected to enterprise assets—even shadow APIs. 

It also monitors with Deep API Risk Trackers (DART) that apply proven machine learning to customer-specific API blueprints that drive automatic identification of API risks and, real-time detection of reconnaissance attempts, and provide real-time response modules enforce targeted policies against API abuse—the only solution to entirely address the OWASP API Security Top 10.

CloudVector, which was formerly known as ArecaBay, also announced the appointment of Ravi Khatod as co-founder and CEO. Ravi is a seasoned Silicon Valley security executive with more than 15 years of experience focused on building foundational teams and strategy, driving sales success and customer excellence, and delivering growth at category-defining vendors including IronPort, CipherTrust, and AppSense. Prior to CloudVector, he served as CEO of Agari, a next-generation email security company, where he drove 300 percent in revenue run rate growth in three years.

“APIs have become mission critical for organizations as they move to the cloud and embrace digital transformation initiatives. Attackers have also recognized this new and broad attack surface. As we’ve seen with recent high profile data breaches API security has become a predominant challenge,” said Khatod. “The shortcomings of existing gateways represent a multi-billion dollar market opportunity for CloudVector, which is advancing the state of the API Threat Protection market with its solution.”

CloudVector has raised more than US$5 million in seed funding round led by SignalFire, which it is aggressively investing in the growth of its R&D, sales and marketing teams.

“CloudVector delivers API Threat Protection we couldn’t find in any other vendor, without negatively impacting DevOps—it automates tedious manual processes to discover APIs and secure them,” said Abhijit Oak, vice president, Software Development, Katerra. “This product enables us to simplify our security structure and spend.”

Cisco joins with Perch Security to help MSPs protect, detect and respond to an increasing threat landscape

Cisco partnered with Perch Security to deliver a new security solution for managed service providers (MSPs) who are challenged by an evolving threat landscape. MSPs are on the front lines of protecting their clients against data breaches, malware, ransomware and other attacks for which they are often unprepared. 

To address these threats, Cisco is applying its security expertise and portfolio to MSPs in partnership with Perch to bring them the tools that will strengthen their security posture and better protect both themselves and their clients.

The combined technology solution offers clear benefits for Cisco partners and their customers by correlating events from both the endpoint and network, reducing ticket counts and lowering labor costs. 

Perch has integrated with Cisco Advanced Malware Protection (AMP) for Endpoints and Cisco Umbrella, ingesting their logs and feeding them into Perch’s security information and event management (SIEM) solution.

Its features include Perch’s Security Operations Center (SOC) that provides event correlation, alert review, and custom alert options; and Perch’s Duo integration correlates Duo Multi-Factor Authentication and endpoint visibility with data from other Perch-connected cloud services, such as Office 365, Cisco Umbrella and Cisco AMP. 

By combining these solutions into a single pane of glass, alerts are correlated and consolidated to reduce tool sprawl. Perch feeds data from cloud services and security products into a single data lake that is monitored by Perch SOC.

This announcement ties into the newly created Cisco Secured MSP offer, which includes a free, internal use license program and gives MSPs the ability to elevate their internal security and protect themselves from attack. This works by using DNS solution from Cisco Umbrella for MSP, next-generation endpoint detection and response with Cisco Advanced Malware Protection (AMP) and cloud-based threat detection from Cisco Stealthwatch Cloud. 

The Cisco secured MSP offer brings the best of security to every MSP and the knowledge and training to get it right the first time through the Protect Your House course on ConnectWise MSP University. Cisco helps partners grow managed service revenue with incentives, promotions and market development funds (MDF).