Spherical Defense

Spherical Defense provides API security protection using unsupervised deep learning technology. The company's platform develops positive security models of applications in real-time by analyzing API traffic patterns, eliminating the need for manual rule creation or signature definitions that traditional WAFs require. The platform operates by continuously learning from API requests, whether from historic data or real-time API calls, and automatically adapts as applications evolve and user behavior changes. The system analyzes structured machine-to-machine communications flows including external web logs, internal application logs, and system logs. It performs session-level analysis by monitoring entire sequences of interactions between external clients and APIs. Spherical Defense's technology is designed specifically for analyzing complex tree-based data structures and JSON objects. The platform operates autonomously without requiring intervention or historical attack data, treating zero-day attacks as deviations from normal behavior patterns. All data processing occurs within the customer's network, ensuring no data leakage off-premises. The company offers deployment options including a one-click AWS marketplace solution called Spherical Defense Express. Use cases include protecting internal application-level traffic, API security, monitoring kernel system calls and OS queries, and securing internal communications through service meshes or Kubernetes environments. The platform integrates with existing infrastructure whether on-premises or in private cloud environments.