Traceable

Company Overview

Traceable is a leading API security company that provides intelligent and context-aware API security solutions for enterprises. Founded by serial entrepreneurs Jyoti Bansal and Sanjay Nagaraj, Traceable aims to comprehensively protect APIs from next-generation attacks. The company is headquartered in San Francisco, California.

Traceable’s mission is to protect every API to help ensure the security of the services and data that power modern applications. The company recognizes APIs as foundational elements enabling seamless communication and interaction between various software components.

Products Overview

Traceable offers a comprehensive API Security Platform with the following key capabilities:

1. API Discovery and Security Posture Management: Automatically and continuously discovers and catalogs all APIs, including internal, external, shadow, and partner APIs. Provides visibility into API risk posture and sensitive data flows.

2. Threat Detection and Analytics: Leverages machine learning and behavioral analysis to detect anomalies and potential threats. Provides an API security data lake for threat hunting and forensic analysis.

3. Attack Protection: Automatically detects and blocks known and unknown API attacks, business logic abuse, fraud, and sensitive data exfiltration in real-time.

4. Fraud and Bot Security: Detects and prevents API abuse, fraud attempts, and malicious bot activity.

5. Contextual API Security Testing: Enables proactive testing of APIs for vulnerabilities using real context from active API traffic.

The platform is powered by Traceable’s OmniTrace Engine, which consists of:

• STITCH: Collects and correlates API data to create context and form an API Security knowledge graph.
• SAVANT: Applies behavioral analysis and contextual policies to provide actionable security insights.

Founding Team

The company was founded by:

• Jyoti Bansal - CEO & Co-Founder
• Sanjay Nagaraj - CTO & Co-Founder

Both founders previously worked together at AppDynamics, where they saw the massive adoption of cloud-native architectures and APIs, which led them to start Traceable.

Problem and Market Fit

Traceable addresses the growing need for comprehensive API security as organizations rapidly adopt APIs and cloud-native architectures. The company aims to protect against API-related threats like attacks, data breaches, fraud, and abuse that traditional security tools struggle to detect and prevent.

Business Model

Traceable operates on a SaaS (Software-as-a-Service) model, offering its API Security Platform to enterprises on a subscription basis. The company also provides self-managed deployment options for on-premises or cloud environments.

Funding and Runway

While specific funding amounts are not provided, Traceable is backed by top cybersecurity investors including:

• IVP
• Unusual Ventures
• Citi Ventures
• Sorenson Capital
• GGV Capital

Competitive Landscape

The API security market is competitive, with other players including Salt Security, Noname Security, and 42Crunch. Traceable differentiates itself through its context-aware approach, comprehensive platform capabilities, and the pedigree of its founding team.

Customers

Traceable serves customers across various industries. Some of their notable customers include:

• Informatica
• Jobvite
• Credit Karma
• Globe
• Altana
• FalconX
• Lemonade Insurance
• Lineage Logistics
• Opala
• Central1
• Ethos
• Houwzer
• Harness
• Outreach

Relevant News

• In April 2023, Traceable introduced Zero Trust API Access capabilities to help organizations actively reduce their API attack surface.
• The company has been expanding its leadership team, with recent additions including a Chief Revenue Officer and Chief Customer Officer.
• Traceable continues to enhance its platform capabilities, with recent focus areas including Gen-AI API security and advanced bot and fraud protection.

Traceable appears to be well-positioned in the growing API security market, with a comprehensive platform, strong founding team, and backing from reputable investors. The company’s focus on context-aware, intelligent API security aligns with the evolving needs of enterprises as they increasingly rely on APIs for critical business operations.