Cloud Native AMTD for API Threat Protection and Access Control

Legacy API threat protection and access control solutions weren't built for the speed and scale of the cloud. Statistics indicate they are failing to protect cloud resources. Hopr's cloud native Automated Moving Target Defense is built for the cloud and uses four patented innovations that no other API Threat Protection or Access Control solution has:

DECENTRALIZED IDENTITY AND VERIFIED TRUST: Each workload holds and manages their own Identity and Secrets service. Workload identities are "certificate-free," overcoming the implementation challenges common with external centralized IAM services and improving trust and interoperability across cloud environments. Workload identity trust is verified at each communication session..

END-TO-END ENCRYPTION OF DATA EVERYWHERE WITHOUT A KEY EXCHANGE. Workload egress messages are secured using a Synchronous Ephemeral Encryption (SEE™) protocol, SEE™builds end-to-end encrypted communication channels without a key exchange. Existing API keys are wrapped in encryption and recognized and trusted on arrival.

MALWARE DELIVERY PREVENTION: Ingress messages from untrusted and malicious sources fail decryption on arrival and are discarded before they can reach the endpoint, even if they arrive via the Public Key Infrastructure that is in place (e.g. TLS).

AUTOMATED MOVING TARGET DEFENSE: Hopr automatically rotates credentials at a high frequency in real time and across all clouds to disable the ability of threat actors to steal and misuse workload credentials or launch MITM attacks. Untrusted connections are prevented in all clouds and across organizations.

THE PRODUCT: These four innovations protect workloads, API endpoints, and data in transit. Our SaaS solution is composed of Hopr Sidecars and Hopr Infrastructure.

HOPR SIDECARS: Lightweight, thin clients that are built on open-source Envoy proxy and deployed with host workloads. XTRA Sidecars operate within the enterprise and K4C sidecars interoperate with external organizations, such as partners, suppliers, and customers.

Hopr Sidecars are to workloads what USB is to physical computing devices - a universal connector. And Hopr Sidecars connect trusted workloads in any cloud environment and across organizations, adding much needed trust and security to B2B ecosystems such as financial services and healthcare systems, manufacturing, utilities, and retail. Hopr Sidecars keep every business, supplier, partner, and customer safe.

THE PLAN:

TRY FOR FREE... FOREVER: Hopr's Free Forever plan (this public listing) protects up to 30 workloads per month, each performing up to 10,000 communication sessions per month. (API calls within a session are not charged and are unlimited). These are monthly limits and usage above either the free workload volume or free session volume is billed at a small unit fee.

CONSUMPTION-PRICED PLANS: Hopr Sidecars are used in all of our cloud native SaaS plans. All plans are "consumption priced" with fees charged for the number of workloads equipped with sidecars and the number of communication sessions performed each month. Consumption prices decrease with increased volume of use.

For custom pricing, pay-as-you-go, and annual contract plans with features such as reporting, custom algorithms, fault tolerance, SLA/SLO, or a Private Contract, please email aws-mp-sales@hopr.co , for a Private Offer.

VALUABLE BENEFITS: *** Lower Cyber Risk ------- Defends against 18 common cyber attacks ------- Malware delivery prevention *** Assured Data Confidentiality and Integrity *** Cost savings over third-party and cloud IAM services *** Improved container portability and interoperability across cloud environments *** Cloud Native Automated Moving Target Defense *** Low Adoption Costs. No code changes to existing apps or APIs. *** Future proof (quantum resistant)

IMPORTANT FEATURES: --- Immutable, rotating, workload identities --- Verified workload identity trust (trust is verified at the start of every communication session). --- Synchronous Ephemeral Encryption (end-to-end symmetric encryption without a key exchange.) --- Decentralized and autonomous identity and secrets management --- High Frequency Credential Rotation (prevents credential theft). --- 100% Malware Delivery Prevention (even if it arrives encrypted in TLS) --- 100% Data Confidentiality and Integrity (in transit, over the entire routed between endpoints) --- Decryption-based trust verification. --- Protection of both client and server endpoints --- Protection across all cloud environments (private, hybrid, multi-cloud) --- Encryption and decryption at either Layer 4 (every packet) or Layer 7 (message bodies). --- Protection of N-S traffic and E-W traffic --- Operates with any containerize workload system or VMs