Guest: John Leon (LinkedIn)
Company: Apiiro (Twitter)
Show: Newsroom

Apiiro is an application security posture management (ASPM) platform that focuses on identifying the risk in the codebase. “The company’s mission is to connect into customer’s repositories, understand developer activity, and the complete application inventory to build a complete application inventory,” says John Leon, VP of Ecosystems and Partnerships at Apiiro in the latest episode of TFiR: Newsroom. This can then identify high business impact risk so that asset professionals know where their time should be spent but also to correlate a risk back to a code owner for remediation.

While the tooling for developers and operations teams is mature and quick in terms of what can be deployed into production, the gate of what should be promoted into production still lies with the security side. Yet, the shift left movement in practice can be very difficult with different people utilizing different tooling. If risks can be identified at the earliest point in time with the developers themselves, and they are given appropriate tooling and the context they need to remediate that risk, then the organization as a whole can progress quicker.

Apiiro and Akamai have partnered to launch a technical alliance for delivering code-to-runtime API security. The security posture element to API at runtime is already being addressed by runtime security vendors: however, customers do not have complete visibility of their APIs in their codebase. Apiiro’s partnership with Akamai aims to address this gap to enable organizations to have end-to-end visibility of their APIs across all areas so that they can understand their posture as a whole.

CISOs working in large enterprises who secure their posture from design to production or runtime can get more value, and ship code faster into production. Apiiro and Akamai’s partnership also tackles the two sides of remediation, by helping organizations discover if there is a problem but also by enabling organizations to have the information to hand of who owns it and who can fix it, reducing the MTTR. The partnership’s solution can improve an organization’s health, have a positive impact on its culture, and enable API Sec Champions programs.

This summary was written by Emily Nicholls.