{"id":17379,"date":"2023-11-15T09:03:39","date_gmt":"2023-11-15T09:03:39","guid":{"rendered":"https:\/\/staging2022.42crunch.com\/?p=17379"},"modified":"2024-02-28T16:29:02","modified_gmt":"2024-02-28T16:29:02","slug":"42crunch-and-microsofts-defender-for-cloud-partner-to-deliver-end-to-end-api-security","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/42crunch-and-microsofts-defender-for-cloud-partner-to-deliver-end-to-end-api-security\/","title":{"rendered":"42Crunch And Microsoft\u2019s Defender for Cloud Partner to Deliver End-to-End API Security"},"content":{"rendered":"
San Francisco, CA, November 15, 2023 <\/strong>\u00a0 – Today 42Crunch, the API DevSecOps platform, announced the integration of 42Crunch\u2019s API security audit and vulnerability testing solution with Microsoft Defender for Cloud to provide Microsoft customers continuous API protection from design to runtime. Cloud applications are increasingly API-centric, with APIs at the core of data exchange. Inherently, APIs are easy to expose, but difficult to defend and traditional application security solutions are not optimized to protect APIs. Increasingly high profile attacks on APIs have resulted in data breaches, leading to loss of sensitive data as well as reputational harm. 42Crunch and Microsoft have announced this partnership to enable developers to find and fix API vulnerabilities while giving security teams centralized governance across their APIs.<\/p>\n With Microsoft Defender for APIs, an offering as part of Microsoft Defender for Cloud \u2013 a cloud-native application protection platform<\/a>, organizations can improve their security posture and quickly detect active real-time threats. Together with 42Crunch, development teams will be able to \u201cshift left\u201d by testing their APIs for security vulnerabilities earlier on in the development lifecycle. By combining insights and security findings from both solutions within the Defender for Cloud platform, security teams will have broad visibility and governance of the risks associated with their APIs from design to runtime. Additionally, operations teams will be able to leverage the native workflow capabilities of Defender for Cloud to accelerate remediation efforts.<\/p>\n Key challenges according to Gartner \u00ae are \u201cProtecting web APIs with general purpose application security solutions alone continues to be ineffective. Each new API represents an additional and potentially unique attack vector into your systems. Gartner recommend enterprises \u201cadopt a continuous approach to API security across the API development and delivery cycle, designing security into APIs. Include API security testing and the creation and application of reusable API security policies.”1<\/sup><\/p>\n Jacques Declas, CEO of 42Crunch, welcomed the announcement saying \u201cThis partnership between Microsoft and 42Crunch validates our common vision of providing customers globally with a true DevSecOps solution to protect their digital assets from an ever growing array of attacks.\u201d \u201cIt is well recognized that an effective API security strategy must start early in the software development lifecycle. This partnership between 42Crunch and Microsoft will enable customers to define, implement, and enforce API security compliance and governance across their API estate at scale,\u201d added Declas.<\/p>\n \u201cToday’s announcement strengthens Microsoft’s CNAPP solution, Defender for Cloud, by expanding its capabilities to provide comprehensive API security coverage across the entire API development lifecycle. Our partnership with 42Crunch enhances Defender for Cloud’s existing runtime API security capabilities by bringing added visibility into potential vulnerabilities that may be introduced through your DevOps pipeline,” said Vlad Korsunsky, Vice President of Cloud and Enterprise Security at Microsoft. “Together with 42Crunch, we bridge the gap of API security from development to runtime and empower security teams to exercise governance over their API ecosystem throughout the development lifecycle.\u201d<\/p>\n For a detailed description of how the 42Crunch API Security platform integrates with Microsoft Defender for Cloud read the onboarding guide article <\/span>HERE<\/b><\/a>.\u00a0<\/span> This new integration is available today in public preview for customers of Microsoft Defender for Cloud using GitHub, with Azure DevOps support to come. Additionally, customers can purchase 42Crunch through the Microsoft Commercial Marketplace<\/a>.<\/p>\n About 42Crunch<\/strong>
\n<\/span><\/p>\n
\n42Crunch enables a standardized approach to securing APIs that automates the enforcement of API security compliance across distributed development and security ecosystems. Our API security testing and protection services are used by Fortune 500 enterprises and over 1 million developers worldwide. The 42Crunch API DevSecOps platform empowers developers to build security from the IDE into the API pipeline and gives application security teams control of security policy enforcement from the CI\/CD across the entire API lifecycle. This seamless DevSecOps approach to API security reduces governance costs and accelerates the delivery of secure APIs.\u00a0 Sign up to the industry\u2019s #1 online API Security community newsletter powered by 42Crunch at https:\/\/APIsecurity.io.<\/a><\/p>\n