Your environment is more dynamic than ever which means APIs are being born and buried at an alarming pace. ProtectOnce constantly monitors your environment to detect: new APIs that are deployed, changes in how or even if an API is used, or changes in critical API configurations.
The pace of change has created two new problems for you: Shadow APIs and Zombie APIs.
- ProtectOnce exposes Shadow APIs to you, so you can either embrace them or remove them. Shadow APIs are APIs that are created but undocumented. These APIs exist, and are in use, but are not covered by your OpenAPI specs or your public facing documentation. This creates both operations and security risk.
- ProtectOnce detects APIs with usage patterns that indicate they are now flesh-eating undead, and helps you block or remove them from your application. Zombie APIs are APIs that were once in use but have been superseded or fallen out of favor. These APIs linger and are often the least up to date and patched.
ProtectOnce gives you up to the second inventories and schema of all your APIs, so answering questions like “which of our APIs are unauthenticated?”, or “do we have any APIs with sensitive data in the EU?” is always at your fingertips.