Page 26 - Cyber Defense eMagazine October 2023
P. 26
mission to redefine the DevOps and AppSec space with an emphasis on the ability to empower
organizations to create code that's not only secure but also meets their time-to-market demands.
Qwiet AI's PreZero platform (pictured below in Fig. 1) is at the center of their innovation, as it
revolutionizes the way vulnerabilities are identified and mitigated within software code.
Traditionally, scrutinizing in-house or third-party libraries required tedious manual inspections,
posing the risk of overlooking true vulnerabilities or generating false positives and false
negatives. However, the PreZero platform, fueled by Qwiet AI's cutting-edge engine, introduces
an innovative approach. It quickly scans previously unknown libraries and conducts a meticulous
comparison against open-source and previously scrutinized counterparts, unveiling new
vulnerabilities almost instantaneously. In essence, it transcends the realm of merely detecting
zero-day vulnerabilities, extending its capabilities to discover previously undisclosed or
unreleased vulnerabilities. Central to PreZero's capabilities is the revolutionary use of the Code
Property Graph (CPG), which deconstructs code into its elemental components, unraveling
functional elements and data flow paths into a singular property graph. The ultimate goal of
PreZero is to harness a collaboration of known vulnerabilities, heuristic detections, and guided
AI, delivering both rapid and pinpoint accuracy. This empowers Qwiet's customers to address
reachable and exploitable vulnerabilities efficiently, eliminating the need for unproductive hunts
for false positives or postponed upgrades. Remarkably, by prioritizing these critical
vulnerabilities, Qwiet customers achieve an impressive track record, resolving 70% of new
vulnerabilities in a mere 14 days or less.
Bruce Snell, Qwiet AI's Director of Product and Technology Marketing, emphasized the
transformative role of AI in the cybersecurity landscape. "At Qwiet AI, we're looking to change
the AppSec space the way EDR changed the anti-virus space," Snell stated. "In five years, if
you're not using AI to find vulnerabilities in code, you're going to quickly find yourself out of
business. Our ultimate goal is to reduce the noise around software vulnerabilities and help our
customers to focus on what's important: producing secure code."
Qwiet AI's innovation has earned them praise from clients across various industries. A
testimonial from a security engineer in the retail sector highlights their impact: "As a security
engineer working with the Dev teams to implement SDLC and Code security standards and
compliance, deploying Qwiet AI for static code testing was a great experience. I enjoyed working
with the experts from the Qwiet AI team."
As digital threats are constantly evolving, Qwiet AI's commitment to pushing the boundaries of
cybersecurity through AI-driven solutions like PreZero Platform ensures that their customers stay
ahead in terms of protection and innovation.
Cyber Defense eMagazine – October 2023 Edition 26
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.