AI + Robotics for the Built World

The security team at Gecko Robotics works tirelessly to ensure data security and compliance. Due to uncovering new attack surfaces within both client and cloud endpoints almost everyday, they needed a solution to secure their application’s full stack. The team had an additional goal to find a Cloud Native Application Protection Platform (CNAPP) that discovers, secures, and monitors any new App/APIs in the Cloud at all times. In order to fulfill these requirements, the team evaluated a number of vendors one of which was Data Theorem.

During application penetration testing, Gecko Robtoics knew the importance of assessing the risk involved with their application’s attack surface. While some tools are great at identifying application attack surfaces, they will often fail to identify data that circumvents network firewalls and WAFs, as well as daily changes that keep up with the CI/CD lifecycle. This can leave an application open to an attacker. Gecko leveraged the CNAPP criteria for their search and found that Data Theorem covered all of them and beyond, with API security capabilities that were automated.

According to Gartner, the three most important capabilities of CNAPP technologies are:

1. Threat and vulnerability management: These technologies support the remediation of vulnerabilities. They provide formalized workflow, reporting and collaboration capabilities.

2. Security incident response: These technologies support how an organization plans, manages, tracks and coordinates the response to a security incident.

3. Security operations automation: These technologies support the automation and orchestration of workflows, processes, policy execution and reporting.

The Gecko Robtoics team was impressed with how Data Theorem was able to identify data leakage that had gone undetected. They discovered that they needed API security beyond what their cloud provider prescribed to them. The automated process of creating a secure code for developers and having the ability to test different solutions by scanning before going into production has helped them immensely and expanded their use of the product.

As we have more integrations, each new API represents another potentially unique hack into our systems. The Data Theorem platform underscores the importance of automated, daily scanning so that risk gaps can be addressed quickly.

Additionally, the team has leveraged the Data Theorem platform to help enforce corporate governance policies. When issues are found by the Data Theorem analyzer engine, not only are they automatically flagged with remediation details but the Data Theorem support team has acted as Gecko's go to security experts by providing additional information on each issue, letting Gecko Robotics know what data is at risk and how hackers can penetrate these vulnerabilities.