LinkedIn
Twitter
Hi all,
We are excited to announce the launch of Actions and Alerts to Advanced API Security in preview! Actions and Alerts enhance Advanced API Security capabilities by reducing the time between threat detection and resolution through automation, minimizing the potential impact, and shifts your security approach from reactive to proactive.
What are Actions?
Actions are automated operations (including allowing, denying, flagging, and redirecting API traffic from specific clients), triggered in response to security threats or anomalies, and based on predefined conditions.
You can choose to specify these clients manually or rely on built-in detection rules in Advanced API Security. These detection rules identify known API threats or patterns detected by our machine learning models pinpointing malicious activities, such as API scraping or anomalies.
Today, developers need to manually exclude specific IP addresses via their Web Application Firewalls (WAF) or through implementing policies — a process requiring a full development cycle for each change. These processes are often ineffective against adaptive attacks that constantly change IP addresses. Now with Actions, developers can automatically defend against malicious traffic.
What are Alerts?
Alerts are instant notifications that inform relevant stakeholders when a potential security incident or anomaly is identified. With our new Alerts capability, you are instantly notified of any unusual API traffic (as identified by the detection rules) or of any changes to your security scores.
Today, customers have to constantly monitor their security scores or dashboards to identify new attacks. Now with Advanced API Security, you can easily configure an Alert to receive notifications by text, email, or other channels upon detection of unusual traffic.
Next steps:
Check out our technical documentation to learn more about these new capabilities or explore them hands-on by getting started with Apigee.
Happy development!
Shelly
