[AI Revolution](211) Softrick: "Inadequate API Security Risks Massive Sensitive Data Leaks at Once"

Importance of API Traffic Optimization and API Threat Response

Kim Dongchul, CEO of Softreeq, is giving an interview to The Asia Business Daily. Photo by Dongju Yoon

"With the rapid advancement of artificial intelligence (AI), API (application programming interface) security has become even more critical. Since large amounts of sensitive information can be leaked through APIs, we must pay extra attention to API security."

Dongchul Kim, CEO of Softrick, emphasized in an interview with The Asia Business Daily at the Softrick headquarters in Banpo-dong, Seoul, on August 11, "If API security is not properly established, hackers can access a company's IT assets and steal vast amounts of data," adding, "It is urgent to strengthen API security to block data leaks through networks and applications."

Softrick is a company specializing in API security founded in 2023 by CEO Kim, who has built his career at security firms such as Injen and KSign, driven by a spirit of challenge and a desire to become an "eccentric in the security industry." An API refers to a protocol that supports intercommunication and sharing of data and functions among various software programs and components. APIs manage how applications interact, control how requests are made, and determine the types of requests that can be exchanged between programs. Softrick provides solutions including an API governance platform, account management and access control tools, and automated vulnerability assessment solutions.

Kim explained, "The recent API market is shifting from simple connection and mediation features to focusing on API governance platforms that integrate API lifecycle management, policy, security, and monitoring," adding, "The growing importance of API traffic optimization and API threat response capabilities convinced me to establish a company specializing in API security."

Kim emphasized, "Hackers can generate a large amount of API traffic, similar to DDoS attacks, to cause overload or service degradation. They do not simply call an API once but make multiple calls to extract large volumes of sensitive information simultaneously. Furthermore, they search for previously unidentified API vulnerabilities to attack, so securing API visibility is crucial."

Dongchul Kim, CEO of Softlik, is being interviewed by The Asia Business Daily. Photo by Dongju Yoon

Softrick's flagship product is "Pafim Gateway," an integrated API management solution that optimizes the operation and management of APIs, which serve as data communication pathways between software. Pafim Gateway intermediates and manages API calls between internal and external systems within an organization, controls traffic between services, and safely processes API requests. Softrick completed the development of Pafim Security through participation in the "AI Security Promising Company Support Project" led by the Korea Internet & Security Agency (KISA), and this product received Grade 1 GS Certification this year.

Kim revealed that Softrick was recently acquired by Netts, an identity and access management (IAM) and single sign-on (SSO) company, following recognition of its technological capabilities. Kim said, "It was a time when we needed funding for research and development (R&D), and I received an acquisition proposal from Netts, a leading IAM company in Korea, recognizing a valuation of 20 billion won," adding, "Even after the acquisition, I will remain the second largest shareholder and will be guaranteed management rights for a certain period." Kim stated, "Going forward, Softrick plans to further advance the automated operation features of Pafim Gateway, expand policy templates, and strengthen integration with monitoring and security solutions to aggressively target the public and financial sectors," adding, "We intend to actively expand the market through synergies with Netts, which already has a large base of financial and major corporate clients."

This content was produced with the assistance of AI translation services.