Cequence Advances API Security with AI-Native Platform 9.0, Enhancing Compliance and Performance

Cequence Security has launched its latest offering, Cequence Platform 9.0, marking a significant evolution in API security management. This AI-native platform fundamentally alters user interaction with API security tools, integrating advanced features designed to enhance both compliance and operational efficiency. The platform includes a built-in AI Assistant, an open Model Context Protocol (MCP) server, a comprehensive risk rules library aligned with 25 global regulatory frameworks, and a re-engineered API security engine capable of managing extensive enterprise API environments without compromising performance.

The Rise of Agentic AI in cybersecurity

The advent of agentic AI is reshaping how enterprises engage with their customers and manage internal IT operations. As organizations increasingly adopt AI agents, the pace of this transformation often outstrips the capabilities of existing security tools. Unlike many vendors who merely append chatbots to their products, Cequence has taken a more holistic approach. The entire Platform 9.0 is designed to be AI-native and open, allowing users to leverage either Cequence’s built-in model or their own preferred AI solutions.

With Platform 9.0, users can initiate conversations and pose pertinent questions without needing to navigate complex interfaces or menus. The platform is engineered to deliver answers directly, streamlining the user experience. Furthermore, teams equipped with sophisticated AI workflows can utilize their own agents to access these capabilities through the open MCP architecture, eliminating the need for custom integrations.

Ameya Talwalkar, CEO and Co-Founder of Cequence, emphasized the innovative architecture of Platform 9.0. He noted that while many vendors merely added chatbots, Cequence chose to rebuild its framework entirely. This design allows any agent to operate the platform directly, whether through the built-in AI Assistant or a client’s own agent. Talwalkar stated, “That is what AI-native actually means: the UI becomes optional. We are building for the way the agentic enterprise already works, while making sure a human approves every change along the way.”

AI Assistant: A Game Changer for API Security

One of the standout features of Platform 9.0 is its built-in AI Assistant, which can respond to plain-language inquiries such as “What is my biggest risk right now?” The assistant provides ranked, evidence-backed findings derived from real-time platform data. Unlike traditional security chatbots that often require expertise to be effective, the Cequence AI Assistant is designed to support practitioners of all skill levels from the outset.

The capabilities of the AI Assistant include:

• Driving Actions from Conversations: Users can interact in plain English to classify APIs, identify risks, draft rules, and generate reports without needing to navigate the user interface.
• Open MCP Server: Any MCP-capable agent, SOAR platform, or automation workflow can interact with the platform through an open API contract, facilitating integration into broader workflows without custom development.
• Human Oversight: While read actions can be executed freely, any proposed write action requires explicit human approval, ensuring governance and control.
• Transparency: The AI Assistant provides insight into its reasoning and the underlying tool calls, clarifying its processes and limitations.

Shreyans Mehta, CTO and Co-Founder of Cequence, highlighted the unique design of the Platform 9.0 agent. He noted that it operates a complete agentic loop, planning which tools to utilize, executing calls, and synthesizing ranked recommendations while maintaining transparency about its processes. This governance-first approach is integral to the platform’s design, ensuring it is suitable for practitioners at all levels.

Compliance-Ready Features for Immediate Impact

Compliance remains a critical driver for API security investments, often presenting challenges that can stall progress. Platform 9.0 addresses these challenges by providing a suite of rules, frameworks, and reports that enable organizations to become audit-ready without the need for extensive professional services or custom rule development.

Key compliance features include:

• Pre-Built Risk Rules: The platform includes over 250 pre-built risk rules mapped to 25 global compliance frameworks, such as OWASP API Security Top 10, PCI DSS, GDPR, HIPAA, and ISO 27001, among others.
• One-Click Audit-Ready Reports: These reports leverage live data to map findings to specific controls, assess risk, and offer remediation guidance, with options for company or partner branding.
• Observe Mode: This feature allows teams to test proposed rules without triggering formal issues, enabling the addition of frameworks without overwhelming unreviewed findings.
• Test Panel: Users can validate any rule against sample request and response data prior to activation.

Enhanced API Security Engine for Scalability

As agentic AI accelerates the growth of API endpoints, Platform 9.0 incorporates a fully re-engineered security engine designed to discover, catalog, and assess risk across an organization’s API landscape. This rebuild enhances performance while minimizing CPU usage, making it suitable for large-scale enterprise deployments.

Improvements in the API security engine include:

• Increased Endpoint Support: The platform can now support 50 times more API endpoints, maintaining sub-five-second page load times across all views, regardless of the number of endpoints.
• Reduced Compute Costs: Significant improvements in CPU footprint translate into lower infrastructure costs, particularly beneficial for on-premises installations.

The launch of Cequence Platform 9.0 represents a pivotal moment in API security, combining advanced AI capabilities with robust compliance features and enhanced performance metrics. As organizations navigate the complexities of API security, the platform offers a comprehensive solution designed to meet the evolving demands of the cybersecurity landscape.

Source: securitymea.com

Keep reading for the latest cybersecurity developments, threat intelligence and breaking updates from across the Middle East.