Qwiet AI Lights the Way to the Future of AppSec/DevSecOps Security with Blacklight

 Qwiet AI, the first in the AppSec industry to provide AI-powered detection of vulnerabilities in code, announced the launch of Blacklight, which brings a security threat feed into the real-time analysis of code.

The announcement comes after rigorous testing of the technology by Qwiet AI  customers who reported that Blacklight reduced their average cost per vulnerability.

“A key attribute of our value is reducing the cost and complexity associated with finding and fixing critical vulnerabilities in code,” said Stuart McClure, CEO of Qwiet AI. “Blacklight empowers developers to prioritize fixes in a meaningful way by illuminating vulnerabilities that are being actively exploited. It provides related exploits, threat actors, ransomware, and botnets that are exploiting discovered vulnerabilities in the wild. The result gives developers a way to distinguish between reachability and exploitability, so they can fix what matters most.”

Latest Insights: AiThority Interview with Ahmad Al Khatib, CEO and Founder at Qudo

A Threat Feed for Application Security

Threat feeds are valuable parts of any security organization’s arsenal, pulling information from various sources such as telemetry from network security tools, honeypots, scanning and crawling forums and open-source repositories, human intelligence and others to provide timely information on the latest security threats.

Qwiet AI’s preZero platform integrates a security threat feed into real-time code security analysis. With Blacklight, organizations can now see what exploits are out in the wild taking advantage of vulnerabilities, allowing for easier prioritization of fixes.

Utilizing EPSS to Determine Exploitability

Ranging from 0 to 1 (representing 0% to 100%) the Exploit Prediction Scoring System (EPSS) is an open model that utilizes machine learning to predict how likely a Common Vulnerability & Exposure (CVE) is to be exploited in the wild. This data is pulled from various public and private sources, including real-world information from Security Information & Event Management (SIEM) tools. Such contextual intelligence helps Qwiet AI customers understand the severity of a vulnerability in a way that a simple enumeration of Common Vulnerability Scoring Systems (CVSS) and CVEs alone do not.

Latest Insights:  AiThority Interview with Vova Kyrychenko, CTO at Xenoss

Blacklight Qwiets the Noise around Fixes

One of the biggest issues organizations face is prioritization. Thanks to Blacklight, Qwiet AI customers have another tool to prioritize issues found during a scan. When managing the balancing act between time-to-market and security, knowing which vulnerabilities pose a real threat helps focus engineering efforts on the fixes that will have the biggest impact and provide the largest reduction in risk.

McClure added, “Blacklight is the newest way Qwiet AI is helping customers reduce the noise generated by false positives and focus on what’s important: releasing secure code at scale without increasing tech debt.”

Latest Insights: AiThority Interview with Brad Anderson, President of Product and Engineering at Qualtrics

[To share your insights with us, please write to sghosh@martechseries.com]