{"id":24605,"date":"2021-05-31T05:52:08","date_gmt":"2021-05-31T05:52:08","guid":{"rendered":"https:\/\/rbsitsoftwaresolution.com\/blog\/salt-security-lands-70m-for-tech-to-protect-apis-from-malicious-abuse.html"},"modified":"2021-05-31T05:52:08","modified_gmt":"2021-05-31T05:52:08","slug":"salt-security-lands-70m-for-tech-to-protect-apis-from-malicious-abuse","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/salt-security-lands-70m-for-tech-to-protect-apis-from-malicious-abuse.html","title":{"rendered":"Salt Security lands $70M for tech to protect APIs from malicious abuse"},"content":{"rendered":"

APIs make the world go round in tech, but that also makes them a very key target for bad actors: As doorways into huge data troves and services, malicious hackers spent a lot of time looking for ways to pick their locks or just force them open when they\u2019re closed, in order to access that information. And a lot of recent security breaches stemming from API vulnerabilities (see here<\/a>, here<\/a> and here<\/a> for just a few) show just how real and current the problem is.<\/p>\n

Today, a company that\u2019s building a network of services to help those using and producing APIs to identify and eradicate those risks is announcing a round of funding to meet a growing demand for its services. Salt Security<\/a>, which provides AI-based technology to identify issues and stop attacks across the whole of your API library, has closed $70 million in funding, money that it will be using both to meet current demand but also continue building out its technology for a wider set of services and use cases for API management.<\/p>\n

The funding is being led by Advent International, by way of Advent Tech, with Alkeon Capital, DFJ Growth and previous backers Sequoia Capital, Tenaya Capital, S Capital VC and Y Combinator all also participating.<\/p>\n

Salt, founded in Israel and now active globally, is not disclosing valuation, but I understand from a reliable source that it is in the region of $600-700 million.<\/p>\n

As with many of the funding rounds that seem to be getting announced these days, this one is coming on the heels of both another recent round, as well as strong growth. Salt has raised $131 million since 2016, but nearly all of that \u2014 $120 million, to be exact \u2014 has been raised in the last year.<\/p>\n

\n

Peloton\u2019s leaky API let anyone grab riders\u2019 private account data<\/a><\/p>\n<\/blockquote>\n

\n

Part of the reason for that is Salt\u2019s performance: In the last 12 months, it\u2019s seen revenue grow 400% (with customers including a range of Fortune 500 and other large businesses in the financial services, retail and SaaS sectors like Equinix, Finastra, TripActions, Armis and DeinDeal); headcount grow 160%; and, perhaps most importantly, API traffic on its network grow 380%.<\/p>\n

That growth in API traffic underscores the issue that Salt is tackling. Companies these days use a variety of APIs \u2014 some private, some public \u2014 in their tech stack as a way to interface with other businesses and run their services. APIs are a huge part of how the internet and digital services operate, with Akamai estimating that as much as 83% of all IP traffic is API traffic.<\/p>\n

The problem, Roey Eliyahu, CEO and co-founder of Salt Security, told me, is that this usage has outpaced how well many manage those APIs.<\/p>\n

\u201cHow APIs have evolved is very different to how developers used APIs years ago,\u201d he said. \u201cBefore, there were very few, and you could say they were more manageable, and they contained less-sensitive data, and there were very few changes and updates made to them,\u201d he said. \u201cToday with the pace of development, not only are they always getting updated, but you have thousands of them now touching crown jewels of the company.\u201d<\/p>\n

This has made them a prime target for malicious hackers. Eliyahu notes Gartner stats that predict that by 2022, APIs will make up the largest attack vector in cybercrime.<\/p>\n

Salt\u2019s approach starts with taking stock of a whole network and doing a kind of spring clean to find all the APIs that might be used or abused.<\/p>\n

\u201cCompanies don\u2019t know how many APIs they even have,\u201d Eliyahu said, noting that some 40%-80% of the APIs in existence for a typical company\u2019s data are not even in active operation, lying there as \u201cshadow APIs\u201d for someone to pick up and misuse.<\/p>\n

It then looks at what vulnerabilities might inadvertently be contained in this mix and makes suggestions for how to alter them to fix that. After this, it also monitors how they are used in order to stop attacks as they happen. The third of these also involves remediation \u201cinsights\u201d, but carrying out the remediation is done by third parties at the moment, Eliyahu said. All of this is done through Salt\u2019s automated, AI-based, flagship Salt\u00a0Security\u00a0API Protection Platform.<\/p>\n

\n

API security startup 42Crunch raises $17M Series A led by Energy Impact Partners<\/a><\/p>\n<\/blockquote>\n

\n

There are a number of competitors in the same space as Salt, including Ping, and newer players like Imvision and 42Crunch (which raised funding<\/a> earlier this month), and the list is likely to grow as not just other API management companies get deeper into this huge space, but cybersecurity companies do, too.<\/p>\n

\u201cThe rapid proliferation of APIs has dramatically altered the attack surface of applications, creating a major challenge for large enterprises since existing security mechanisms cannot protect against this new threat,\u201d said Bryan Taylor, managing partner and head of Advent\u2019s technology team, in a statement. \u201cWe continue to see API security incidents make the news headlines and cause significant reputational risk for companies. As we investigated the API security market, Salt stood out for its multi-year technical lead, significant customer traction and references, and talented team. We look forward to drawing on our deep experience in this sector to partner with Salt in this exciting new chapter.\u201d<\/p>\n

\n

Enterprise security attackers are one password away from your worst day<\/a><\/p>\n<\/blockquote>\n

\n

Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/96tf2Q7wZBw\/<\/p>","protected":false},"excerpt":{"rendered":"

APIs make the world go round in tech, but that also makes them a very key target for bad actors: As doorways into huge data troves and services, malicious hackers <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-24605","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t