Cequence provides Unified API Protection (UAP) solution. The company offers runtime application programming interface (API) visibility, security risk monitoring, and patented behavioral fingerprinting technology to detect and protect against ever-evolving online attacks. Cequence is formerly known as Stealth Security. The company was founded in 2014 and is based in Sunnyvale, California.
Cequence's Product Videos
ESPs containing Cequence
The ESP matrix leverages data and analyst insight to identify and rank leading companies in a given technology landscape.
The web application firewalls (WAF) market aims to protect web applications from advanced and aggressive threats. As the internet continues to evolve, it can be challenging for security professionals to stay current on the multitude of possible attack vectors. WAFs act as a barrier between web applications and potential attackers, monitoring and filtering incoming and outgoing traffic to identify …
Cequence's Products & Differentiators
API Visibility and Protection.
Research containing Cequence
Get data-driven expert analysis from the CB Insights Intelligence Unit.
CB Insights Intelligence Analysts have mentioned Cequence in 2 CB Insights research briefs, most recently on Feb 14, 2022.
Expert Collections containing Cequence
Expert Collections are analyst-curated lists that highlight the companies you need to know in the most important technology spaces.
Cequence is included in 2 Expert Collections, including Artificial Intelligence.
Companies developing artificial intelligence solutions, including cross-industry applications, industry-specific products, and AI infrastructure solutions.
These companies protect organizations from digital threats.
Cequence has filed 14 patents.
Computer network security, Computer security, Virtual private networks, Computer networking, Internet privacy
Computer network security, Computer security, Virtual private networks, Computer networking, Internet privacy
Latest Cequence News
Sep 1, 2023
Security Boulevard Community Chats Webinars Library FFIEC API Security Guidance for Financial Services In an era where technology is the cornerstone of the financial industry, safeguarding sensitive information and maintaining the integrity of data has become paramount. Financial institutions are constantly faced with the challenge of ensuring the security of their systems, especially when it comes to Application Programming Interfaces (APIs) and API security . The Federal Financial Institutions Examination Council (FFIEC) has established security guidelines and addressed API security specifically in its most recent Authentication and Access guidance . Understanding API Security Before we dive into the specifics of FFIEC’s requirements, let’s grasp the concept of API security . APIs act as bridges between different software systems, enabling them to communicate and exchange data seamlessly. They play a pivotal role in enabling financial institutions to offer innovative services to customers, but they also introduce potential security vulnerabilities. Hackers are continually looking for weak points in APIs to gain unauthorized access, steal sensitive data, or disrupt services. Cequence Security provides an industry leading Unified API Protection platform that can be the foundation of any financial services API security strategy that provides full API lifecycle protection. Finance organizations have invested in Cequence Security for API inventory, compliance, testing, mitigation, and fraud. Cequence currently secures more than 6 billion API calls per day and protects more than 2 billion user accounts across Fortune 50 customers. The FFIEC API Security Framework The FFIEC, a consortium of regulatory bodies overseeing financial institutions in the United States, recognized the need to set standards for security to ensure the safety of financial transactions and customer data. Their security framework serves as a blueprint to help financial institutions identify and mitigate risks associated with API usage, among other things. Based on the categories below we have outlined where Cequence can provide immediate protection and assessment for your API protection strategy. 1. Authentication and Access Control The first pillar of the FFIEC framework focuses on ensuring proper authentication and access control mechanisms. Institutions are required to implement strong authentication methods, such as multifactor authentication (MFA), to verify the identity of API users. Additionally, access control mechanisms must be in place to restrict API access to authorized individuals or systems. Cequence offers agentless discovery with no software or traffic redirects, providing a complete view of your external and internal APIs in a matter of minutes. Cequence can also provide an analysis of runtime traffic for OWASP Top 10 identity authentication weaknesses that may exist in your API landscape. 2. Encryption and Data Protection Encrypting data is a fundamental aspect of securing APIs. The FFIEC mandates the use of encryption for data both at rest and in transit. This ensures that sensitive information remains unreadable even if intercepted by malicious actors. 3. Audit and Monitoring Proactive monitoring is crucial for identifying and responding to potential security breaches swiftly. Financial institutions must implement audit logs that track API usage and any unusual activities. These logs aid in detecting and investigating security incidents. Cequence Security unifies API discovery, inventory, compliance, dynamic testing with real-time detection and native detection to defend against fraud, business logic attacks, and data leakage. 4. Secure Development and Testing Developing and testing APIs securely is a cornerstone of the FFIEC framework. Institutions are encouraged to follow best practices during the development lifecycle, conduct thorough security testing, and promptly address vulnerabilities. Cequence uses Generative AI to automatically generate security test cases customized to your unique APIs, business, or vertical. Comprehensive API testing of your application in the CI/CD pipeline ensures critical vulnerabilities are remediated before production. 5. Incident Response and Recovery Even with robust security measures, incidents can occur. The FFIEC requires financial institutions to have well-defined incident response and recovery plans in place. These plans should outline steps to mitigate the impact of breaches and ensure the continuity of services. 6. Third-Party Risk Management Many financial institutions rely on third-party APIs to enhance their offerings. However, these third-party integrations can introduce risks. The FFIEC stresses the importance of assessing and managing third-party risks through due diligence, contract negotiations, and ongoing monitoring. This is another strength of Cequence Unified API Platform protection. Cequence enables organizations to assess APIs and runtime traffic and what is coming in, where it is coming from, and when to mitigate. Embracing the Future of API Security As technology continues to evolve, so do the tactics of cybercriminals. The FFIEC API security requirements provide a foundational framework to help financial institutions navigate the complex world of API security. However, it’s important to note that these requirements are just a foundation; they should be seen as a starting point for building a strong security posture. Financial institutions should continuously educate their teams about emerging threats and best practices, conduct regular security assessments, and adapt their security strategies accordingly. Collaborating with cybersecurity experts and staying updated on industry trends is essential to stay ahead of potential risks. Cequence Security can play a crucial role for financial services organizations in complying with FFIEC API security guidance and securing their financial systems. By adhering to these guidelines, financial institutions can contribute to the creation of a secure and resilient financial landscape, where customers can trust that their sensitive information remains protected, and transactions occur without a hitch.
Cequence Frequently Asked Questions (FAQ)
When was Cequence founded?
Cequence was founded in 2014.
Where is Cequence's headquarters?
Cequence's headquarters is located at 100 S. Murphy Avenue, Sunnyvale.
What is Cequence's latest funding round?
Cequence's latest funding round is Unattributed VC - III.
How much did Cequence raise?
Cequence raised a total of $90M.
Who are the investors of Cequence?
Investors of Cequence include Prosperity7 Ventures, Hewlett Packard Pathfinder, KPN Ventures, Shasta Ventures, Dell Technologies Capital and 8 more.
Who are Cequence's competitors?
Competitors of Cequence include Wallarm, Operant, Noname Security, SALT , Ever.Security and 9 more.
What products does Cequence offer?
Cequence's products include API Sentinel and 2 more.
Compare Cequence to Competitors
Salt Security provides an application programming interface (API) security platform. The platform prevents sensitive data exposure, stops API attacks, provides remediation insightsm and more. It was formerly known as SECful. The company was founded in 2016 and is based in Palo Alto, California.
Traceable aka Traceable AI develops a cloud cyber security solution to help companies defend apps. Traceable's API security platform aims to provide a solution for organizations to detect API-level assaults, which typically go unnoticed. Traceable was founded in 2018 and is based in San Francisco, California.
Noname Security develops application programming interface (API) security solutions. Its services include posture management, runtime protection, security testing, proactive remediation, attack prevention, and more. It caters to the financial services, healthcare, public, and retail sector. The company was founded in 2020 and is based in San Jose, California.
Reblaze offers a web security solution. The company provides cloud-based, intelligent web security for sites, apps, and services. It defends against DoS/DDoS, hacking and breaches, bots, scraping, and other web threats. The company was founded in 2011 and is based in Herzelia, Israel.
ThreatX offers an API protection platform that protects APIs from threats such as DDoS attempts, bot attacks, API abuse, exploitations of known vulnerabilities, and zero-day attacks. Its multi-layered detection capabilities identify malicious actors and dynamically initiate appropriate action. The platform is designed for a variety of industries globally. The company was founded in 2014 and is based in Boston, Massachusetts.
FireTail allows customers to solve critical problems faced by the Application Programming Interfaces (API) at the application layers. It implements and enforces practices in authentication, authorization, validation, and sanitization of API requests and responses. The company was founded in 2021 and is based in Mclean, Virginia.