Noname Security provides a platform for continuous discovery and real-time analysis of APIs, enabling organizations to identify vulnerabilities and monitor for attacks across their entire API ecosystem. By automating the detection of OWASP Top 10 vulnerabilities and integrating with existing security workflows, the solution enhances visibility and response capabilities against API threats.
Funding
$135M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Organizations face increasing API attacks and data theft due to vulnerabilities and misconfigurations within their API ecosystems. Existing security measures often lack comprehensive visibility and real-time analysis capabilities, leaving APIs exposed to OWASP Top 10 API Security Risks and business logic abuse.
Solution
Akamai API Security provides continuous discovery and real-time analysis of APIs to defend against threats and data theft. The platform delivers full visibility into an organization's entire API estate, including shadow, zombie, and rogue APIs. It automates the detection of API vulnerabilities, including OWASP API Top 10 risks, and integrates with existing security workflows to enhance response capabilities. By using contextual insights and machine learning, the solution identifies risks such as data leakage, suspicious behavior, malicious bots, and API attacks, enabling organizations to mitigate business logic abuse and prevent API attacks.
Target Audience
The primary target audience includes security, development, and API teams seeking to safeguard their digital businesses and data from API-related threats, abuse, and vulnerabilities.
Features
- Native connection to Akamai CDN and integration with API gateways, load balancers, and WAFs for assessing API traffic
- Discovery of APIs, domains, and related issues for HTTP, RESTful, GraphQL, SOAP, XML-RPC, and JSON-RPC APIs
- Identification of sensitive data types accessible by APIs and tracking of user access
- Analysis of APIs for OWASP Top 10 API Security Risks with vulnerability prioritization
- Visualizations of business logic, physical network infrastructure, and API traffic flows for understanding API context
- Continuous monitoring for compliance with regulatory requirements, industry standards, and internal policies
- Machine learning-driven identification of anomalous usage, API attacks, data leakage, tampering, and policy violations
- Blocking of API attacks in real time and setup of advanced remediation workflows, with optional managed security service
- Full integration with existing CI/CD pipelines and automated execution of 200+ tests simulating malicious traffic