Legit and Traceable: Better Together

Get details on Legit's new partnership with Traceable.

Most security teams struggle to prioritize application vulnerabilities. They are inundated with findings from security tools, and lack the data and insights needed to understand what to fix first. This struggle is compounded by API sprawl rapidly expanding the attack surface and introducing an additional set of vulnerabilities.

A new partnership between Legit Security and Traceable helps security teams address this challenge.

The Legit ASPM platform understands and visualizes the full context of an application, including the business, supply chain, and production environments, plus keeps a full inventory of all APIs found in code. Traceable offers visibility into risk found within APIs in use, and provides important context, such as data used within the API, AuthN/AuthZ, etc.

Through a combination of both platforms, organizations can not only better prioritize vulnerability remediation based on business context and runtime API attack information, but they will also have earlier visibility into less frequently used APIs that can then be sent to Traceable for additional risk analysis.

Benefits of Legit + Traceable

This partnership benefits security teams by helping them:

Better prioritize vulnerability remediation with vendors’ combined data

With this integration, security teams better prioritize vulnerability remediation based on business risk, as well as real-time vulnerability/attack data on exposed API attack surfaces.

Legit pulls Traceable vulnerabilities and associates them with the appropriate repository and product unit based on API inventory matching. These issues will then be presented in the Legit issue pane with all the additional context provided by Legit, alongside issue, remediation, and any additional context information provided by Traceable.

Uncover additional API risk by extending testing to orphaned/not exercised APIs

In the coming months, Legit will have the ability to create an API inventory through code analysis, and this inventory can then be sent to Traceable through a clickable button or an API call. The Legit inventory can then be added to Traceable's API inventory for additional API security testing and analysis.

With this integration, security teams uncover additional risk in API attack surfaces, including orphaned and/or not exercised APIs that Traceable did not discover. This partnership ensures that API security testing is conducted across 100% of the portfolio.

Enact on-demand, proactive API testing for new or changed APIs

Legit + Traceable will also soon allow security teams to proactively test when new APIs are created or existing APIs are changed.

Using Legit's workflow orchestration tool, security teams can coordinate additional actions, such as Traceable API security testing or manual pen testing, based on newly discovered APIs or APIs that have significantly changed, i.e., manipulated AuthN/Z, or changes to the data models being used with the API.

Learn More

To get more details on Legit’s ASPM platform, or on the Traceable/Legit partnership, request a demo.