Traceable API Security for Cloud-Native Apps

What do you like best about the product?

We have found Traceable AI to be an exceptional solution for our API inventory management needs. Our decision to adopt this product has been greatly validated by its performance and compatibility with our environment. We have seamlessly tailored its features to align with our requirements and have even implemented it within our on-premise infrastructure. The comprehensive insights it offers into our inventory have significantly facilitated our triage processes and overall inventory management.

One noteworthy aspect of Traceable AI is its remarkable customer support. In particular, I would like to commend Vijay Shankar from the Traceable team for his dedicated assistance. He has been our single point of contact and has consistently provided excellent support. The team's proactive approach, including regular follow-ups and prompt responsiveness, has truly set a high standard for customer service. They have been exceptionally accessible and have ensured timely updates in response to any requests, changes, or feature enhancements.

What do you dislike about the product?

As for areas of improvement, I have encountered minor issues primarily related to the user interface (UI). Occasionally, certain elements such as page numbers and filters have displayed inaccuracies or inconsistencies. However, it is worth mentioning that the Traceable team is receptive to user feedback and diligently incorporates updates to enhance the platform's functionality.

What problems is the product solving and how is that benefiting you?

I am truly impressed by the impact of Traceable AI on our API inventory management. The platform's ability to provide a holistic view of our APIs, coupled with its rapid issue identification, customizable features, and on-premise security deployment, has significantly elevated our API management capabilities. Additionally, the team's commitment to refining the platform based on user feedback ensures a responsive and user-centric experience. Traceable AI has undeniably streamlined our operations and empowered us to make more informed decisions regarding our API ecosystem.

What do you like best about the product?

At our organization, we emphasize conducting meticulous Proof of Concept (POC) assessments involving at least three vendors before making product procurement decisions. This evaluation encompasses aligning the vendor's solution with our specific use cases, technical support requirements, and the product team's vision.

Our rigorous POC process consistently positioned Traceable at the forefront, achieving top rankings across all evaluated criteria compared to other vendors. The support team's assistance has been phenomenal during the POC phase and throughout the provisioning of both production and non-production environments.
With unwavering confidence, I affirm that this tool has significantly elevated the effectiveness of our security program.

What do you dislike about the product?

It would have been advantageous if the TPA (Traceable Platform Agents) servers could have also been hosted within the vendor's cloud infrastructure. While I understand design constraints might limit this possibility, such an arrangement would have benefitted our organization and other mid-sized customers like us.

What problems is the product solving and how is that benefiting you?

Assisting in fortifying our API security stance.

What do you like best about the product?

We selected Traceable for it's testing capabilities, but it also gives me so many ways to slice and dice and understand how our APIs are being used and abused.

The support is really impressive. Every time I have a question, they either have the answer or can figure it out pretty quickly and they are very willing to walk me through their complex UI to demonstrate how I can figure out more answers.

What do you dislike about the product?

The UI is confusing and still clearly from a startup. I would like the ability to save queries (in traces), save views and filters, and have it remember how I laid out the screen.

What problems is the product solving and how is that benefiting you?

We use it to test our APIs for vulnerabilities and are also starting to use it to understand how we are being attacked and how our APIs are designed to help prevent or assist attackers (so that we can change them).

What do you like best about the product?

This tool meets and exceeds all expectations within all the API Security areas including shift left. The tool deploys easily and quickly and was able to detect all the tests other vendors missed during PoCs. Support has been working well with our model which has become a good partnership. Their shift left component is an excellent way to verify vulnerabilities don't end up in production and goes beyond what a typical DAST can't test. We look forward to future implementation with their Language Agents so that we can take full advantage of the NextGen WAF capabilities.

What do you dislike about the product?

For complex environments, a new deployment will take extra coordination with support since their documentation doesn't cover all use cases (how can they?). Integrations with other tools are possible, but require assistance from their support while they continue to build the portfolio.

What problems is the product solving and how is that benefiting you?

This tool helps us detect and block malicious actors attacking our internally developed and sometimes forgotten APIs. We also scan through our SDLC pipeline to reduce vulnerabilities making their way to production.

What do you like best about the product?

Traceable was invaluable in helping provide inventory of our APIs and how the APIs are being used. It also showed how our APIs are utilzing APIs. In addition it was straight forward to install and get immediate insight on vulnerabilities and attacks on our APIs.

What do you dislike about the product?

It was not straight forward on removing false positivies from Traceable. Creating custom threats against our API required more work than other vendors we tested.

What problems is the product solving and how is that benefiting you?

Traceable generate detailed inventory of our external APIs, undestand how our APIs are utilzing data and identifying threats. This allowed us to provided our SOC and threat hunting teams data to work with our developers to better secure our APIs.