登录
免费试用
English
Background

As the key technology of online application connection and data transmission, API carries the core business logic and a large amount of sensitive data of the enterprise, so it becomes the key target of attackers to steal data. In recent years, with the digital transformation and upgrading of enterprises, the number of APIs has increased sharply, the iteration and release cycle of APIs have also been accelerated. Under the current concept of "focusing on business and ignoring security", many enterprises lack key protection for APIs. It is difficult for enterprises to obtain comprehensive information, for instance, what APIs are exposed to the public, which APIs carry sensitive data, and which APIs have security defects, etc., and a large number of APIs have become blind spots of enterprise digital asset security management.

Security Challenges
Rapid growth of APIs leading to assets management problems
On the one hand, enterprise API assets grow explosively with the development of business, and hundreds of APIs is possible for dozens of business assets; on the other hand, the API iteration cycle is short, and it will be constantly updated with the development of the business, and the assets are constantly in dynamic transformation. It is difficult for enterprises to effectively manage large-scale and dynamically changing assets.
Difficult to monitor dynamic data leakage risk
Enterprises can communicate hundreds of millions of times a day through the API. Facing the frequent interaction of a large amount of data, it is difficult for enterprises to establish a clear data flow chart to monitor the data leakage risk.
Difficult for the existing solutions to identify API vulnerabilities
The protection dimension of existing security solution only stays at the host / service / port level, and cannot be applied to the API level; on the other hand, the existing security solution relies on the scanning ability to assess the vulnerabilities of assets, and it has low efficiency and incomplete coverage, and is unable to continuously monitor the API dynamic assets.
Solutions

Threat Hunter API data asset management solution can deploy the API security control platform in bypass mode and get access to business mirrored traffic without affecting business continuity and existing network architecture. Through traffic analysis, automatically discover all public, private and partner-oriented APIs, as well as Zombie APIs and inactive APIs, establish an API list, and classify API assets. According to the original request and response of the API, identify the sensitive data transferred and API defects and comprehensively master and effectively manage the API data assets of the enterprise to improve the security of overall business.

Core Advantages
Zero business interference

The bypass deployment mode is adopted, without changing the existing network structure of the service with zero business interference.

Dynamic data asset visualization

Conduct the mapping of dynamic API assets and flow data, and comprehensively grasp the API data assets.

Fully identify potential defects of assets

Support the detection of 64 defects in 7 categories, and fully cover the security issues of OWASP API Top 10.

Effective asset management system

Based on security operation, provide API asset management system to improve business security.

Why Threat Hunter?
Fully grasp the situation of API data assets
Take API as the asset center, comprehensively grasp the sensitive data flowing through API and API security defects, and clarify the current business attack and data exposure.
Effectively control potential risks of APIs
Systematically manage zombie APIs, inactive APIs, sensitive data flow and defects of assets to reduce potential risk of business.
Improve business security and reduce data leakage risk
Through the visual situation and risk management of API data assets, improve the security of overall business and effectively reduce the data leakage risk caused by API data assets.
Start a trial