Tech News
Qualys launches AI-powered Web Application Scanning (WAS) with API security
Qualys has announced the launch of its API security platform that leverages AI-powered scanning and deep learning-based web malware detection to secure web apps and APIs across the entire attack surface, including on-premises web servers, databases, hybrid, multi-cloud environments, API gateways, containerized architectures, and microservices.
APIs are integral to digital transformation initiatives across industries. The latest data indicates that over 83% of web traffic now comprises API traffic, highlighting their critical role in modern web applications using microservices, cloud, and hybrid environments. However, this also underscores the vulnerabilities that accompany their widespread adoption.
“Many organizations use a variety of security tools, such as SAST, DAST, SCA, or point solutions for API security that often operate in isolation, without a unified platform to integrate their findings. Moreover, the absence of integration between these tools leads to a fragmented view of the application security posture and results in uncoordinated efforts and gaps in security coverage. Similarly, SAST & DAST tools offer limited coverage for API-specific issues and focus predominantly on code vulnerabilities,” commented Kunal Modasiya, Vice President, Product Management, CyberSecurity Asset Management, Qualys. “Mainly, these solutions fail to extend their assessment to the runtime or environmental threats where APIs operate and provide visibility into the vulnerabilities of the underlying infrastructure hosting these APIs, leaving significant security gaps at the network and host levels.”
Qualys API security addresses and allows organizations to:
- Measure API risks across all attack surfaces with a unified view of API security by discovering & monitoring every API asset across diverse environments, enabling better decision-making and faster response times.
- Communicate API risks like OWASP API Top 10 vulnerabilities & drift from OpenAPI specs with real-time threat detection and response, minimizing the risk window and enhancing overall security.
- Eliminate API risks with integrated workflows supporting Shift-Left & Shift-Right practices, bridging the gap between IT and security teams, promoting seamless collaboration, and improving operational efficiency.
Key features of Qualys API
1. Comprehensive API discovery and inventory management
Qualys WAS with API Security automatically identifies and catalogs all APIs within an organization’s network, including internal, external, undocumented, rogue, and shadow APIs. Whether APIs are deployed in multi-cloud environments (AWS, Azure), containerized architectures (Kubernetes), or API gateways (Apigee, Mulesoft), Qualys’ continuous discovery ensures an updated inventory across all platforms, preventing unauthorized access points and shadow APIs.
2. API vulnerability testing & AI-powered scanning
Qualys provides comprehensive API vulnerability testing using 200+ prebuilt signatures to detect API-specific security vulnerabilities, including those listed in the OWASP API Top 10, such as rate limiting, authentication & authorization issues, PII collection, and sensitive data exposure. Moreover, for large applications, Qualys combines the power of deep learning and AI-assisted clustering to perform efficient vulnerability scans. This smart clustering mechanism targets critical areas, achieving a 96% detection rate with an 80% reduction in scan time.
3. API compliance monitoring
Qualys performs both active and passive compliance monitoring to identify and address any drift or inconsistencies in API implementation and documentation in adherence to the OpenAPI Specification (OAS v3). Clear, standardized API documentation, in adherence to OAS, ensures that shared documentation is easily understood by recipients, simplifies security assessments and enforcement, and enhances the accuracy of code, benefiting both automated tools and human developers. Qualys also continuously monitors APIs for compliance with industry standards such as PCI-DSS, GDPR, and HIPAA to ensure that APIs remain compliant with evolving regulations, avoiding potential fines and enhancing data protection.
4. API risk prioritization with TruRisk
Qualys leverages its proprietary TruRisk scoring system, which integrates multiple factors such as severity, exploitability, business context, and asset criticality to prioritize risks based on overall business impact, ensuring that the most critical vulnerabilities are addressed first. It also categorizes risks based on the OWASP API Top 10, helping organizations focus on the most prevalent and severe API security threats.
5. Seamless integration with Shift-Left and Shift-Right workflows
Qualys integrates seamlessly with existing CI/CD tools (e.g., Bamboo, TeamCity, Github, Jenkins, Azure DevOps) and IT ticketing systems (e.g., Jira, ServiceNow), supporting both shift-left and shift-right security practices. This facilitates automated security testing and real-time threat detection and response without disrupting development workflows. By bridging the gaps between IT and security teams, Qualys ensures smoother operational transitions, improving API security practices and reducing the risk window.
Tech News
Tax Star Raises $1.75m Seed Round to Scale as a Pre-Approved Accredited Service Provider for UAE E-Invoicing
Tax Star, the UAE’s first AI-powered corporate tax software platform, announced it has closed a $1.75 million seed funding round. The raise comes as Tax Star positions itself around one of its most significant regulatory milestones to date, its status as a pre-approved Accredited Service Provider (ASP) for UAE e-invoicing. The round was backed primarily by angel investors.
Tax Star built its reputation as the first AI-powered corporate tax compliance software in the UAE, helping businesses navigate the country’s evolving tax landscape with automation and intelligence at the core of its product. This new funding builds directly on that foundation, with the company now doubling down on its role in the UAE’s e-invoicing rollout, a mandate will require businesses across the UAE to appoint an ASP and implement a compliant e-invoicing process connected to the UAE Electronic Invoicing System.
As a pre-approved ASP, Tax Star is positioned to serve as a trusted bridge between businesses and the UAE’s e-invoicing infrastructure. Being pre-approved validates Tax Star’s technical readiness ahead of key regulatory deadlines, and signals to the market that the company is positioned to capture demand as UAE businesses work to become compliant.
Proceeds from the round will be directed toward three core areas: go-to-market expansion, product development, and simplifying compliance for businesses navigating the UAE’s e-invoicing requirements. Rather than allocating the raise narrowly toward specific accounting-software integrations or new-market entry alone, Tax Star said the funding is designed to strengthen the of what businesses need to become, and stay, compliant.
The raise also supports Tax Star’s broader regional ambitions. The company has stated plans to expand into the GCC as part of its longer-term roadmap. The UAE’s e-invoicing framework, and Tax Star’s early positioning within it, is expected to serve as proof as the company pursues similar opportunities in other markets undergoing their own digital tax transformations.
Tax Star also acknowledges that being part of the Plug and Play and Dubai Founders HQ (DFHQ) start-up program helped Tax Star to prepare themselves for this investment round and helped refine its future expansion plans. The company is also part of the Microsoft for Startups Program and is aspiring to join Dubai’s D33 initiative.
The timing of the raise aligns with a fast-approaching regulatory calendar. Businesses in the UAE with annual revenue of AED 50 million or more face an ASP- appointment deadline of October 30, 2026, ahead of the first mandatory implementation phase for businesses with annual revenue of AED 50 million or more in January 2027. Tax Star said the new funding is intended to help ensure UAE businesses, regardless of size, are equipped to meet these deadlines without disruption to their operations.
“This funding allows us to focus on what matters most right now: easing the compliance burden for businesses across the GCC as e-invoicing becomes a reality,” said Rayhan Aleem, Co-founder and CEO of Tax Star. “Being a pre-approved ASP puts us in a strong position to support businesses through this transition, and this raise lets us invest in the team, the product, and the go-to-market work needed to do that at scale.”
Tax Star is the UAE’s first AI-powered corporate tax software platform and a pre-approved Accredited Service Provider for UAE e-invoicing. The company is also the only Accredited Service Provider listed on the Xero and QuickBooks App Stores offering native integration with those accounting platforms, alongside smooth integrations with Zoho, Odoo, and Naqood. Tax Star helps businesses simplify tax and compliance obligations through automation and AI, with plans to expand its footprint across the GCC and into Europe.
Tech News
FIFA Selects Globant to Create a Continuous Fan Experience Ecosystem for Football Fans Using AI Pods Powered by Glob.AI
FIFA has selected Globant (NYSE: GLOB) to redesign its global fan engagement, transforming how football is delivered to and experienced by billions worldwide.
Key FIFA digital platforms will now enable a more “joined-up” experience for fans where their preferences are recognized across platforms and competitions. Powered by AI Pods by Glob.AI, these platforms will continuously learn from real-time data and generate new experiences for fans all year round, growing FIFA’s influence beyond single tournaments.
This announcement marks an exciting evolution in how FIFA leverages technology within this partnership. FIFA is embracing an AI-native, consumption-based model. Glob.AI brings together human-supervised AI agents based on Globant’s proven processes, forged over 23 years of enterprise software experience. All institutional knowledge generated is secured within a proprietary token vault, granting FIFA complete ownership of its data and future AI-driven innovations. Initial pilots with FIFA have already demonstrated a 20% efficiency increase in throughput generation while maintaining or improving quality rates .
With this new advanced technology implementation, FIFA is working to create a centralized digital ecosystem that learns and will be able to adapt in real time to improve core pillars of the match day and fan experience including:
- Unified Fan Identity: Strengthening FIFA ID as the connective tissue across all digital touchpoints, enabling the organization to recognize, reach and reward fans whether they’re watching from home or attending a match.
- FIFA website: Evolving FIFA.com into a personalized hub for fans, leading to personally relevant content.
- The FIFA Tournament App: Evolving a single, customizable platform that brings together schedules, real-time content and local host city insights for fans on the ground.
For the fan, this means a more human-centric experience: a single digital thread that connects their interaction with FIFA platforms and their attendance at FIFA tournaments, where their fandom is remembered and can be rewarded. Every touchpoint will be powered by specialized AI architectures, which will learn from each action in order to provide increasingly precise and efficient services.
For FIFA, this move will help to end the era of the “anonymous fan” by connecting disparate journeys through a single and actionable ecosystem. By consolidating first-party data and strengthening digital identity, FIFA will gain better insights about how global fans operate and how to enhance their football experience, applying this intelligence to future tournaments, content and commercial initiatives.
“Our goal is to ensure every fan experiences football in a personal way that deepens their emotional connection,” said Mattias Grafström, FIFA Secretary General. “With Globant’s continued innovation, we can hold our technology projects to a higher standard and develop a system that learns and adapts to the needs of our global audience. By keeping the needs of fans present at all times, we will create a more sustainable future for our game.”
“We’re working with FIFA to shape technology around the fan,” said Martin Migoya, Co-founder and CEO of Globant. “With our AI Pods powered by Glob.AI we are building on our five years of collaboration by implementing a whole new service delivery model that moves at the pace of fandom. Football is the world’s number one sport because it remains unpredictable and accessible to all; the human-assisted AI model is key for technology systems that scale quickly and deliver the always-on entertainment that fans expect.”
Tech News
95% of Enterprises Have Delayed AI Projects as Infrastructure Limitations Spark “The Great AI Re-Architecture,” New Cloudera Report Finds
Cloudera, the only company bringing AI to data anywhere, today released its latest global survey, The Great AI Re-Architecture, revealing a fundamental shift in enterprise IT as organizations redesign their data architectures to meet the demands of AI. Based on responses from 1,500 Enterprise Architects, Cloud Infrastructure Leads, and Data Architects worldwide, the report finds that while AI adoption has become mainstream, legacy data architectures are increasingly limiting organizations’ ability to scale AI securely, efficiently, and cost-effectively.
The findings point to a fundamental shift in enterprise IT architecture. While 77% of organizations are actively using AI, nearly all (95%) have delayed or canceled AI initiatives over the past year because of data governance, compliance, or regulatory challenges. To overcome these challenges, 72% say their current data architecture requires a significant overhaul to meet future AI requirements, suggesting today’s infrastructure was not built for the demands of modern AI.
Together, these findings highlight what Cloudera calls “The Great AI Re-Architecture”—the mass transition from legacy data architectures toward hybrid environments that enable organizations to bring trusted AI to trusted data, wherever it resides.
“This current era of AI is forcing organizations to rethink the foundations of their technology infrastructure,” said Sergio Gago, Chief Technology Officer at Cloudera. “Many enterprises are discovering that the architectures built for traditional analytics weren’t designed for the scale, governance, and flexibility AI demands today. Success will depend on building a data foundation that gives organizations the freedom to run AI wherever it makes the most sense, without compromising control or security.”
AI Is Driving an Enterprise Infrastructure Reset
AI has moved well beyond isolated pilot projects and is now embedded across enterprise operations. As organizations expand AI across the business, they’re placing mounting pressure on infrastructure that was never designed for AI at scale.
Three-quarters (75%) of respondents say AI integrations have changed their organization’s data storage and architecture practices, while 84% report increased infrastructure costs driven by AI workloads. Together, these findings suggest organizations are rethinking not only where data lives, but how it is managed, governed, and delivered to AI systems.
Governance Is Critical Infrastructure
As organizations scale AI, governance is becoming foundational to enterprise AI success. Earlier this year, Cloudera’s Data Readiness Index found that 75% of organizations said AI is exposing the limitations of their legacy governance processes. This latest research suggests those challenges are only intensifying as AI adoption grows.
Nearly three-quarters (73%) of respondents say AI has made data governance more complex, and more than half (55%) report delaying or canceling more than six AI projects over the past 12 months due to governance, compliance, or regulatory challenges.
The challenge is compounded by increasingly distributed data. Nearly every respondent (97%) reports moving data between environments at least monthly, making consistent governance across cloud, private cloud, on-premises, and edge environments essential for scaling AI securely.
Hybrid Architectures Become the New Enterprise Standard
Organizations are increasingly adopting hybrid architectures to balance performance, governance, cost, and flexibility, all of which are critical to modern AI success.
Two-thirds (66%) of respondents say they have moved AI workloads from public cloud environments back to private cloud or on-premises infrastructure during the past year, signaling a broader shift toward hybrid architectures that allow organizations to run AI workloads where they perform best.
Looking ahead, organizations are investing across cloud, on-premises, edge, and hybrid environments rather than relying on a single deployment model. One-quarter (25%) say they plan to prioritize a hybrid-first architecture over the next two years, reinforcing that the future of enterprise AI will be defined, in part, by flexibility rather than a single infrastructure strategy.
The Future of Enterprise AI Depends on Hybrid Data Architectures
AI adoption is no longer the differentiator; AI optimization is. Organizations that modernize their data architectures to govern data consistently and run AI wherever it makes the most sense will be well positioned to deliver scalable, secure AI and lasting business value.
As these themes take center stage at Cloudera EVOLVE Singapore next week, read the full report to learn how organizations are preparing their data foundations for enterprise AI.
Methodology
The survey, commissioned by Cloudera and fielded by Wakefield Research (www.wakefieldresearch.com) among 1,500 Enterprise Architects, Cloud Infrastructure Leads, and Data Architects at companies with a minimum size requirement of 1,000 employees in all markets except Spain, Singapore, and South Africa, for which the company size minimum is 250 employees. The research was conducted in 3 Regions and 9 markets: Americas (U.S. (n600), Canada (n100), Brazil (n100)), EMEA (South Africa (n100), Spain (n100), U.K. (n200)), and APAC (Singapore (n100), India (n100), Japan (n100)) between June 5th and June 22nd, 2026, using an email invitation and an online survey.
-
News11 years ago
SENDQUICK (TALARIAX) INTRODUCES SQOOPE – THE BREAKTHROUGH IN MOBILE MESSAGING
-
Trending10 months agoOPPO A6 Pro 5G Review: Reliable Daily Driver
-
Tech News2 years agoDenodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
VAR1 year agoMicrosoft Launches New Surface Copilot+ PCs for Business
-
Automotive2 years agoAGMC Launches the RIDDARA RD6 High Performance Fully Electric 4×4 Pickup
-
Tech Interviews2 years ago
Navigating the Cybersecurity Landscape in Hybrid Work Environments
-
Tech News1 year agoNothing Launches flagship Nothing Phone (3) and Headphone (1) in theme with the Iconic Museum of the Future in Dubai
-
VAR2 years agoSamsung Galaxy Z Fold6 vs Google Pixel 9 Pro Fold: Clash Of The Folding Phenoms


