Apiiro debuts Software Graph Visualization for improved security risk management

Apiiro, an application security platform, has introduced Software Graph Visualization, a feature designed to enhance the identification and management of software risks. This interactive visualization tool allows users to map their software architectures while highlighting vulnerabilities, exposure risks, and changes in real time.

According to Idan Plotnik, co-founder and CEO of Apiiro, traditional methods of self-attestation are no longer effective. “Apiiro is committed to equipping customers with security insights that are intuitive, actionable, and focused,” he said. The new visualization negates the need for developer interviews or questionnaires, offering a clearer picture of how software components interact and where security risks may arise.

With the increased usage of Artificial Intelligence (AI) code assistants, the management of security risks has become more complex, necessitating a solution that adapts to this evolving landscape. Software Graph Visualization achieves this by creating dynamic graphs that illustrate risk exposure and sensitive data flow, which are continuously updated with deep code analysis.

• Threat modeling: The tool helps assess risks and vulnerabilities, ensuring the security of sensitive data.
• Pen-test scoping: The visualization highlights risky areas within the system, enabling targeted testing efforts.
• Change impact assessment: It allows for effective comparison of application states before and after code changes to identify new risks.
• Privacy review: The feature aids in tracking the movement of sensitive data to better manage privacy risks.
• Burst radius analysis: It provides insights into the potential spread of security breaches and their impacts.
• Toxic combinations: Users can identify dangerous combinations across their applications.
• Vulnerability management: It helps prioritize vulnerabilities for more effective remediation.

Software Graph Visualization aims to streamline application security processes, enabling teams to manage risks more efficiently. This advancement signals a shift from manual processes to automated, data-driven approaches.