One stop shop

Posted by Gene Fay on Mar 30, 2021 8:03:02 AM

One of my favorite activities as CEO of ThreatX is participating in meetings with prospects that have a legacy WAF already installed. In most cases, these discussions involve learning about a legacy WAF that, at best, has never been fully deployed or, at worst, has never been trusted enough to be placed into full blocking mode.

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

If all you have is a hammer...

Posted by Gene Fay on Mar 24, 2021 7:45:00 AM

...Everything looks like a nail.

There are over a five billion unique user credentials currently circulating on darknet forums. No wonder credential stuffing/brute force attacks are on the rise and remain one of the most popular attack vectors used by both bad actors and bots alike. And they're not always what they seem to be.

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

Winning the battle  against blended threats

Posted by Tom Hickman on Oct 23, 2020 8:00:00 AM


We're watching evolution in real-time. The bad guys have industrialized the attack toolbox. They're a step ahead of firewalls. They know where the tripwires and detection thresholds are for DDOS and Bot Detection solutions. Staying low and slow is cheap and productive. They’re sappers and deftly understand how to stay below the threshold of detection.  

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

Prune the Sprawl. Get Better AppSec.

Posted by Gene Fay on Sep 28, 2020 9:55:59 AM

“We are all just prisoners here of our own device. 
--The Eagles  

“Help me get rid of some of this stuff, or I’m gonna f’n lose it.
--Anonymous CISO 

I’m going to go out on a very sturdy limb and say that The Eagles weren’t thinking about cybersecurity when they penned that line in Hotel California. Yet my recent conversations with CIOs and CISOs have made it abundantly clear that many security organizations are facing a similar situation. An excess of security tools has led to out-of-control costs and compounding complexity that makes security inefficient and threatens to make organizations less secure. Instead of stopping threats, many security teams end up like fishermen tangled in their own nets - immobilized and paying extra for the privilege.  

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

The Many Faces of Bad Bots

Posted by Gene Fay on Sep 1, 2020 7:45:00 AM

Bad bots and malicious automation are one of the few technology challenges that can materially impact on every business team inside an organization. With up to 50% of Internet traffic generated by bots, organizations are awash in a sea of automated visitors. Some bots are benign, others aren’t. Those that aren't can interfere with customer acquisition. They steal data and intellectual property. They erode application performance. They directly defraud businesses.

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

Five Reasons Agentless AppSec is the Right Choice

Posted by Tom Hickman on Aug 26, 2020 8:45:00 AM


I’m a big fan of the ThreatX agentless architecture. It simplifies many of aspects of deployment and side-steps a lot of the problems with agent-based architecture.

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence, Company | Product Updates

ThreatX Integrates with Cortex XSOAR by Palo Alto Networks

Posted by Gene Fay on Jul 7, 2020 3:53:56 PM

Today I am proud to announce the integration of the ThreatX WAAP with the Palo Alto Networks XSOAR platform. You can read the official announcement for more details here. This integration is exciting for me personally because it tackles one of the most important issues I see facing enterprise security teams regardless of size or industry. Virtually every organization needs to get more leverage out of their security tools, whether that means arming analysts with critical data or turning that data into automated responses. This integration lets organizations harness the power of the ThreatX’s web application + api protection + bog protection + DDoS attack mitigation (WAAP++) platform for such things as risk scores, entity details, and other insights and leverage that data across the enterprise so that teams can do more, faster. 

Read More

Topics: Web, Application & Hybrid Cloud Security, Company | News

Fighting the AppSec Fight: Don't sell products. Create partnerships.

Posted by Chris Brazdziunas on Mar 18, 2020 9:26:34 AM

It’s been a few weeks since we closed the book on another RSA conference. And as always, it was nice to catch up with old friends, meet new ones, and talk to many of the security professionals who are on the frontlines of AppSec every day.

However, after spending some time on the show floor, one thing really stood out for me: vendors were selling security products, and most attendees were looking for security partnerships.

Every vendor seemingly has a promise for why their technology, products, or features are better than their competitors. But ultimately, it falls to the customers to take a leap of faith, invest in a product, staff the product, and make it deliver on its promises. It is the customer that must do the heavy lifting and take on the risk.

Read More

Topics: Web, Application & Hybrid Cloud Security, Threat Intelligence

ThreatX Labs - Blog

Arm yourself with information and insights on the latest cybersecurity trends to defend against today's most advanced cyber criminals with articles from the leader in SaaS-based web application firewall solutions.

Subscribe Here!

Recent Posts

Follow Me