Application Security Software

API Security for Cloud-Native Apps Traceable AI provides the leading API security platform that discovers, manages and secures all APIs against malicious attacks, and provides rich analytics to perform threat hunting, so you can make the right decisions regarding your API security posture. Traceable is designed to protect APIs from the inside by understanding the unique business logic, user attribution, and context of each API – from development through production. We help our customers reduce their API-based business risks by: - Protecting against API attacks - Eliminating API fraud - Supporting SOC teams in business continuity - Preventing sensitive data exfiltration via API - Arming data governance and privacy teams about sensitive data that’s transmitted via API With our distributed tracing technology and advanced context-based behavioral analytics, we deliver modern API security to your cloud-native and API-based applications.

Unprotected web applications are the easiest point of entry for hackers and vulnerable to a number of attack types. FortiWeb's AI-enhanced and multi-layered approach protects your web apps from the OWASP Top 10 and more. When combined with our Web Application Security Service you're protected from the latest application vulnerabilities, bots, and suspicious urls. With dual machine learning detection engines your applications are safe from sophisticated threats such as SQL injection, cross-site scripting, buffer overflows, cookie poisoning, malicious sources, and DoS attacks. FortiWeb is also available as a fully featured WAF-as-a-Service, and is available to trail and purchase in most cloud marketplaces.

Perimeter 81 is transforming the world of secure network access and helping businesses of all industries and sizes smoothly transition to the cloud. Unlike hardware-based firewall and traditional VPN technology, Perimeter 81’s cloud-based and user-centric Secure Network as a Service utilizes the Zero Trust approach and SASE model framework to offer greater network visibility, seamless onboarding, and automatic integration with all the major cloud providers. Named a Gartner Cool Vendor, Perimeter 81 is considered by industry leaders to be winning the “SASE space race". Network security doesn’t have to be complicated – join Perimeter 81 on a mission to radically simplify the cybersecurity experience!

Indusface’s AppTrana is a fully managed web application firewall that ensures risk-based protection with its DDoS, API risk, and Bot mitigation services while assuring web acceleration with secure CDN. Combining automated scanning with manual pen-testing, it detects application vulnerabilities. All of this with 24x7 expert support to meet zero false-positive guarantees. Indusface is the only vendor to be named Customers’ Choice for WAAP in all the 7 segments of the Gartner VoC 2022 Report.

SpinOne by Spin Technology is a SaaS data security management platform designed to monitor, secure, and back up your G Suite, Microsoft 365 and Salesforce data, protect against ransomware, improve compliance, and reduce IT costs. SaaS Backup Backup your Google Workspace, Microsoft Office365, or Salesforce data. Restore any damaged assets in a matter of seconds. Risk Assessment and Access Management Streamline risk assessment and access management of OAuth apps and browser extensions through security policies. Ransomware Protection Reduce downtime to 2 hours from a cloud ransomware attack. Save up to 90% of your recovery costs. SaaS Data Leak Protection Automated SaaS DLP control features and instant security alerts. Multiple Cloud Storage Options Store your data in AWS, GCP or Azure, in multiple storage regions around the world to meet local compliance regulations.

Acunetix is the market leader in automated web application security testing, and is the tool of choice for many Fortune 500 customers. Acunetix detects and reports on a wide array of web application vulnerabilities. The Acunetix industry leading crawler fully supports HTML5 and JavaScript and Single-page applications, allowing auditing of complex, authenticated applications. Acunetix provides the only technology on the market that can automatically detect out-of-band vulnerabilities and is available both as an online and on premise solution. Acunetix also includes integrated vulnerability management features to extend the enterprise’s ability to comprehensively manage, prioritise and control vulnerability threats – ordered by business criticality. Acunetix integrates with popular Issue Trackers and WAFs and is available on Windows, Linux and Online

Dramatically reduce your risk of attacks with Invicti (formerly Netsparker). Get accurate, automated application security testing that scales like no other solution. Your security challenges grow faster than your team. That’s why you need security testing automation built into every step of your SDLC. Automate security tasks and save your team hundreds of hours each month. Identify the vulnerabilities that really matter — then seamlessly assign them for remediation. Help security and development teams get ahead of their workloads — whether you run an AppSec, DevOps, or DevSecOps program. Without complete visibility into your apps, vulnerabilities, and remediation efforts, it’s impossible to prove you’re doing everything you can to reduce your company’s risk. Find all your web assets — even ones that have been lost, forgotten, or created by rogue departments. Scan the corners of your apps that other tools miss with our unique dynamic + interactive (DAST + IAST) scanning approach.

SecPod SanerNow is the world's best unified endpoint security & management platform that powers IT/Security Teams automate cyber hygiene practices. It works on an intelligent agent-server model to execute effective endpoint management and security. It gives you accurate vulnerability management with scanning, detection, assessment, prioritization, and remediation capabilities. SanerNow is available on both cloud and on-premise, whose integrated patch management automates patching across all major OSs like Windows, MAC, Linux, and a vast collection of 3rd party software patches. What makes it unique? You can now access other salient features like security compliance management, IT asset management, endpoint management, software deployment, application & device control, and endpoint threat detection and response, all on a single platform. With SanerNow, you can remotely perform and automate these tasks to secure your systems from the emerging wave of cyberattacks.

Imunify360 is a security solution for web-hosting servers. Imunify360 goes beyond antivirus and WAF and is a combination of an Intrusion Prevention and Detection system, a Application Specific Web Application Firewall, Real-time Antivirus protection, a Network Firewall, and Patch Management components in one security suite. Imunify360 is a fully-automated solution and it collects all statistics under an intuitive dashboard.

Your attack surface is the sum of every attack vector that can be used to breach your perimeter defenses. In other words, it is the total quantity of information you are exposing to the outside world. Typically, the larger the attack surface, the more opportunities hackers will have to find a weak link which they can then exploit to breach your network. Professional hackers typically follow the cyber kill chain when attacking a target, and surveying the target's attack surface is normally the very first step in this process; what is known as advanced reconnaissance. Reducing the attack surface can minimize risk further down the cyber kill chain, preventing attacks before they even occur by eliminating potential attack vectors as early as possible. The cyber kill chain is a method of categorizing and tracking the various stages of a cyberattack from the early reconnaissance stages to the exfiltration of data.

Visual Guard protects in-house business applications from the inside: - Authorize & Manage your users from customers to your workforce - Protect data and functionality from unauthorized access (fine-grained permissions) - Monitor & detect threats in real time - Restrict the access to allow minimum operations in case of breaches

Debricked's tool enables for increased use of Open Source while keeping associated risks at bay, making it possible to keep a high development speed while still staying secure. The service runs on state of the art machine learning, allowing the data quality to be outstanding as well as instantly updated. High precision (over 90% in supported languages) in combination with flawless UX and scalable automation features makes Debricked one of a kind and the way to go for open source management. Recently, debricked released their new platform by the name of Open Source Select where open source projects can be compared, evaluated and monitored to ensure high quality and community health.

Whether open source or commercial, SoapUI testing tools make it easy to create, manage, and execute end-to-end tests on REST, SOAP, & GraphQL APIs, JMS, JDBC, and other web services so you can deliver software faster than ever. For developers and testers looking to accelerate their ability to deliver REST & SOAP APIs, SoapUI Open Source is the simplest and easiest way to begin your API testing journey. Automate and fit API testing into your team’s continuous delivery pipeline with the next generation tool built for validation of REST, SOAP, GraphQL, microservices, and other back-end services. APIs, or Application Programming Interfaces, have become the center of software development, connecting and transferring data and logic across disparate systems and applications. Luckily, testing them can greatly improve the efficiency of your testing strategy as a whole, helping you deliver software faster than ever

The leading solution for agile open source security and license compliance management, WhiteSource integrates with the DevOps pipeline to detect vulnerable open source libraries in real-time. It provides remediation paths and policy automation to speed up time-to-fix. It also prioritizes vulnerability alerts based on usage analysis. We support over 200 programming languages and offer the widest vulnerability database aggregating information from dozens of peer-reviewed, respected sources.

Cameyo is the secure Virtual Application Delivery (VAD) platform for any Digital Workspace. Cameyo makes it simple, seamless, and secure to deliver Windows and internal web applications to any device from the browser without the need for virtual desktops or VPNs. By enabling organizations to provide their people with secure access to the business-critical apps they need to stay productive from anywhere, Cameyo helps make remote & hybrid work, work. Hundreds of enterprises and organizations utilize Cameyo’s Digital Workspace solution to deliver Windows and internal web applications to hundreds of thousands of users worldwide.

Enhance the security of Office 365, Google Workspace, and other cloud services by leveraging sandbox malware analysis for ransomware, BEC, and other advanced threats. The security included with Office 365 filters known antivirus threats, but 95% of today’s malware will only infect one device and is unknown to traditional antivirus techniques. Direct cloud-to-cloud integration: Uses APIs to enhance protection without complications. Sets up quickly and automatically: API integration requires no software to install, no user setting changes, no proxy to deploy, and no MX record to change.

The leading hybrid and multi-cloud platform that provides next-gen WAF, API Security, RASP, Advanced Rate Limiting, Bot Protection, and DDoS purpose built to eliminate the challenges of legacy WAF. Legacy WAFs weren’t designed for today’s web apps that are distributed across cloud, on-premise or hybrid environments. Our next-gen web application firewall (NGWAF) and runtime application self protection (RASP) increase security and maintain reliability without sacrificing velocity, all at the lowest total cost of ownership (TCO).

SonarSource builds world-class products for Code Quality and Security. Our open-source and commercial code analyzer - SonarQube - support 27 programming languages, empowering dev teams of all sizes to solve coding issues within their existing workflows.

ImmuniWeb SA is a global application security company operating in over 50 countries, headquartered in Geneva, Switzerland. Most of ImmuniWeb customers come from regulated industries, such as banking, healthcare, and e-commerce. ImmuniWeb® AI Platform leverages award-winning AI and Machine Learning technology for acceleration and intelligent automation of Attack Surface Management and Dark Web Monitoring. The data is later leveraged for a threat-aware and risk-based Application Penetration Testing for web, mobile, and API security testing. ImmuniWeb is the only company that offers a contractual zero false-positives SLA with a money-back guarantee. ImmuniWeb’s AI technology is a recipient of numerous awards and recognitions, including Gartner Cool Vendor, IDC Innovator, and the winner of “SC Award Europe” in the “Best Usage of Machine Learning and AI” category. ImmuniWeb® Community Edition runs over 100,000 daily tests, being one of the largest application security communities

With triggers in your CI/CD pipeline, SecureStack can check for common security issues and stop those issues from getting into your applications. SecureStack embeds security automatically with every git push. We built our technology to test every facet of your application security looking for things like missing security controls, are you using encryption correctly; we test the efficacy of your WAF and are your cloud-native components secure and more than 250 other data points. All of that was delivered in less than 60 seconds. See what a hacker can see when they view your applications. Test and compare your development, staging and production environments to quickly find critical differences and understand ways to fix high-priority defects. We help you decompose your web application so you are aware of all the resources your app is using behind the scenes.

Fidelis Halo is a unified, SaaS-based cloud security platform that automates cloud computing security controls and compliance across servers, containers, and IaaS in any public, private, hybrid, and multi-cloud environment. With over 20,000 pre-configured rules and more than 150 policy templates that cover standards such as PCI, CIS, HIPAA, SOC, and DISA STIGs for IaaS services, Halo’s extensive automation capabilities streamline and accelerate workflows between InfoSec and DevOps. The comprehensive, bi-directional Halo API, developer SDK, and toolkit automate your security and compliance controls into your DevOps toolchain to identify critical vulnerabilities so they can be remediated prior to production. The free edition of Halo Cloud Secure includes full access to the Halo Cloud Secure CSPM service for up to 10 cloud service accounts across any mix of AWS, Azure, and GCP, at no cost to you, ever. Sign up now and start your journey to fully automated cloud security!

The #1 SaaS bot protection solution for e-commerce and classified ads businesses. Deploys in minutes on any web infrastructure. Unmatched bot detection speed and accuracy. Runs on autopilot, easy to customize. Full protection of your websites, mobile apps and APIs. DataDome takes care of all unwanted traffic so that your IT teams don’t have to. No more on-call incidents due to bot attacks! You still remain in full control, thanks to the bot detection software’s most comprehensive dashboard to monitor and optimize detection and response. DataDome runs anywhere, in any cloud. You install it in minutes with a simple piece of code, optimized for your architecture. Our bot detection software offers unified protection of complex architectures. It’s compatible with all major web technologies, including multi-cloud and multi-CDN setups.

Expose all the hidden security gaps in your organization using nation-state grade technology. CyCognito’s Global Bot Network uses attacker-like reconnaissance techniques to scan, discover and fingerprint billions of digital assets all over the world. No input or configuration needed. Uncover the unknown. The Discovery Engine uses graph data modeling to map your organization’s full attack surface. You get a clear view of every single asset an attacker could reach — what they are and how they relate to your business. Using CyCognito’s proprietary risk-detection methods, the attack simulator identifies risks per asset and discovers potential attack vectors. It doesn’t affect business operations and works without deployment, configuration or whitelisting. CyCognito scores each risk based its attractiveness to attackers and impact on the business, dramatically reducing the thousands of attack vectors organizations may have to those critical few dozen that need your focus

Quixxi Security assesses applications so you understand what vulnerabilities they have. It allows you to conduct penetration testing of apps and puts a secure encryption wrapper around applications so malware can’t access them or the data they handle. So, while your applications work as intended, unauthorised access to them is prevented as they remain almost invisible to malicious software.

At Vulcan Cyber we’re changing the way businesses reduce cyber risk through vulnerability remediation orchestration. We help IT security teams go beyond remedial vulnerability management to help them drive vulnerability remediation outcomes. The Vulcan platform consolidates vulnerability and asset data, with threat intelligence and customizable risk parameters to deliver risk-based vulnerability prioritization insights. But we don't stop there. Vulcan remediation intelligence takes the vulnerabilities that matter to your business and attaches the remedies and fixes needed to mitigate the threat. Then Vulcan orchestrates and measures the rest of the remediation process with integrations and inputs into application security, DevSecOps, patch management, configuration management, and cloud security tools, teams and functions. From scan to fix, Vulcan Cyber delivers the unique ability to orchestrate the entire vulnerability remediation process to GET FIX DONE at scale.