Approov 2.7 Delivers “Shield Right” mobile app API security

Jun 11, 2021 | Mobile, Security

By Peter Kelley

mobile-app-security

Decisive mobile app security for enterprises and for the underserved SMB sector, often

priced out of more complex solutions

Approov has introduced Release 2.7 of the Approov API Shielding platform, which provides companies of all sizes new and leading-edge, affordable API cybersecurity protections for their mobile-based applications.

It is ideal for both large hyperconnected organizations and those underserved smaller and medium-sized businesses (SMBs) and enterprises that were either priced out of application API cybersecurity solutions or were daunted by complex deployment with high overhead. Approov 2.7 delivers:

– Instant, immediate effective shielding of mobile app APIs and protection from the costs of fraud, without demands on in-house talent to implement and sustain complex back-end solutions,

– Easy back-end integration with partner solutions (e.g. API Gateways, WAFs, CDNs, etc.) for comprehensive security and control of API access,

– Deep security expertise to stay ahead of attackers’ next moves,

– Cross-platform consistency that’s complimentary to Apple iOS and Google Android tools,

– Real-time visibility and enhanced reporting, and

– “Actual use” pricing that charges only for the validation of genuine active monthly users. Competing offerings also charge for rejected traffic at the backend, failed attempts by bots, scripts or tampered apps, etc.

Nico Gabriel, President of car rental disruptor SixtX, said Sixt: “In the early days of car sharing, we saw aggregators displaying the availability and location of our vehicles. Reviewing our API security arrangements, we realized how straightforward it was to extract this level of data and we worried that third parties might be able to take a further step, and reserve and access our cars via our API. We sought a solution which could authenticate API requests from our mobile apps and from third party mobile apps. We are not opposed to sharing data, but we want to control what we share and who we share it with. Approov gives us that control.”

Alexandre Branquart, CIO/CTO & Co-Founder of award-winning Swiss eCommerce platform Deindeal added: “Knowing what is calling your API is necessary to protect your mobile channel against scripts and bots that can negatively impact your revenue streams.”

App API Inoculation:

Approov said run-time shielding of APIs complements current development-stage “shift left” initiatives with new, ongoing production “shield right” inoculation for production apps against cyber threats and automated attacks, while protecting optimal customer experience.

David Stewart, CEO of Approov, noted that too many organizations lack the time, expertise and budgets to deploy hard-to-manage backend bot /API security solutions, and many are concerned about the potential impact of app/API protections on customer-experience. “This last year, we’ve all seen just how foundational integrated mobile applications and services are to the fabric of our daily lives. We have also seen the security gaps arising from our collective increased dependence on mobile app APIs, and with Approov 2.7, we effectively address them,” Stewart said.

 

 

 

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more
Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

September 4, 2026 | ITBriefcase.net Why it matters: ShinyHunters claimed responsibility for a breach of McKesson Corporation — the largest pharmaceutical distributor in North America, delivering approximately one-third of all prescription medicines to US hospitals,...

read more
Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

August 28, 2026 | ITBriefcase.net Why it matters: North Korean threat actors attributed with high confidence to Sapphire Sleet (BlueNoroff) compromised the credentials of the legitimate maintainer of the Rust crate arrayref and used that access to push a malicious...

read more