ThreatX Runtime API & Application Protection Introduced
April 11, 2023

ThreatX announced ThreatX Runtime API & Application Protection (RAAP).

This patent-pending capability goes beyond basic observability to extend threat detection, tracking and blocking to customers’ runtime environments, without slowing developers or requiring expertise in cloud-native applications.

As organizations transition apps and workloads to the cloud, often across multi-cloud environments, attackers seek new ways to access sensitive data. While the Log4Shell vulnerability served as a wake-up call to runtime threats, shoring up these gaps is easier said than done. With ThreatX RAAP, organizations can greatly extend protections beyond the edge and address a myriad of risks to runtime environments, including insider threats, malware, web shells, remote access software, code injections and modifications, and malicious rootkits.

“The CISOs I meet with make it clear: they need fewer standalone tools and a better ability to protect their APIs and applications across both legacy and cloud-native environments,” said Gene Fay, chief executive officer at ThreatX. "We are excited to make these new capabilities possible and give our customers the means to confidently block attacks in real time – from the edge to runtime.”

The ThreatX RAAP solution is easily deployed as a sidecar container within a Kubernetes environment. Leveraging extended Berkeley Packet Filter (eBPF) technology, ThreatX RAAP enables deep network flow and system call inspection, process context tracing, and advanced data collection, profiling & analytics. With eBPF, ThreatX RAAP inspects network traffic anywhere on a host or node without requiring an in-line deployment.

ThreatX RAAP may be deployed as a standalone solution to address runtime environments or coupled with the ThreatX API & Application Protection – Edge solution. When used in tandem, these capabilities provide a 360-degree ability to detect, track and block threats to APIs and applications.

Other benefits of the ThreatX RAAP solution include:

- Block high risk transactions, such as data exfiltration attempts and excessive data exposure

- Protect transactions within a corporate network (i.e., east-west traffic), including virtual networks and subnets

- Prevent malware hidden within encrypted data via transparent TLS inspection – without disrupting confidentiality or integration of communications

- Reduce massive alert fatigue associated with other security tools through ThreatX’s risk-based blocking capability

“As we explored ways to extend our ability to block, it was important we enable customers to cover runtime environments, and to do so in a way that was painless for both security and developers,” said Andrius Useckas, co-founder and CTO at ThreatX. “eBPF allows us to offer all of this, and more. We believe this cloud-native capability will greatly improve companies’ API and application protection today, and offer many other benefits down the road.

Share this

Industry News

April 18, 2024

SmartBear announced a new version of its API design and documentation tool, SwaggerHub, integrating Stoplight’s API open source tools.

April 18, 2024

Red Hat announced updates to Red Hat Trusted Software Supply Chain.

April 18, 2024

Tricentis announced the latest update to the company’s AI offerings with the launch of Tricentis Copilot, a suite of solutions leveraging generative AI to enhance productivity throughout the entire testing lifecycle.

April 17, 2024

CIQ launched fully supported, upstream stable kernels for Rocky Linux via the CIQ Enterprise Linux Platform, providing enhanced performance, hardware compatibility and security.

April 17, 2024

Redgate launched an enterprise version of its database monitoring tool, providing a range of new features to address the challenges of scale and complexity faced by larger organizations.

April 17, 2024

Snyk announced the expansion of its current partnership with Google Cloud to advance secure code generated by Google Cloud’s generative-AI-powered collaborator service, Gemini Code Assist.

April 16, 2024

Kong announced the commercial availability of Kong Konnect Dedicated Cloud Gateways on Amazon Web Services (AWS).

April 16, 2024

Pegasystems announced the general availability of Pega Infinity ’24.1™.

April 16, 2024

Sylabs announces the launch of a new certification focusing on the Singularity container platform.

April 15, 2024

OpenText™ announced Cloud Editions (CE) 24.2, including OpenText DevOps Cloud and OpenText™ DevOps Aviator.

April 15, 2024

Postman announced its acquisition of Orbit, the community growth platform for developer companies.

April 11, 2024

Check Point® Software Technologies Ltd. announced new email security features that enhance its Check Point Harmony Email & Collaboration portfolio: Patented unified quarantine, DMARC monitoring, archiving, and Smart Banners.

April 11, 2024

Automation Anywhere announced an expanded partnership with Google Cloud to leverage the combined power of generative AI and its own specialized, generative AI automation models to give companies a powerful solution to optimize and transform their business.

April 11, 2024

Jetic announced the release of Jetlets, a low-code and no-code block template, that allows users to easily build any technically advanced integration use case, typically not covered by alternative integration platforms.

April 10, 2024

Progress announced new powerful capabilities and enhancements in the latest release of Progress® Sitefinity®.