
对于安全团队而言,发现威胁只是挑战的一部分。他们还必须确定哪些应用程序面临风险、相关活动与正常业务运作有何关联,以及采取何种措施能在不影响用户体验的前提下降低安全风险。Huskeys推出的Profiling功能正是为了解决这些问题,它能让企业全面、动态地掌握自身Web应用及API的运行状况。据SiliconANGLE率先报道,该功能现已正式发布。
For security teams, detecting a threat is only part of the challenge. They must also determine which application is at risk, how the activity relates to legitimate business operations, and what action will reduce exposure without interrupting users. Huskeys is introducing Profiling to address those questions, giving organizations a dynamic, business-aware view of their web applications and APIs. The launch was first reported by SiliconANGLE.
Profiling旨在将应用端点、真实用户及其行为特征、现有安全控制措施以及关键业务流程整合至同一分析框架中。Huskeys计划借助这一综合分析能力,协助企业制定更具针对性的安全策略,而非单纯依赖通用规则,或仅在发现可疑活动后才采取应对措施。
Profiling is designed to connect application endpoints, real users, behavior, existing security controls, and business-critical workflows in one profile. Huskeys plans to use that context to help organizations prepare more targeted controls instead of relying exclusively on generic rules or responding after suspicious activity has already been identified.
安全决策的新起点目前,许多企业通过部署一系列第三方技术来保障应用安全,包括内容分发网络(CDN)、爬虫管理工具、Web应用防火墙(WAF)以及API安全平台等。虽然这些工具各自负责安全防护的不同环节,但它们往往只能获取应用环境的局部信息。
A Different Starting Point for Security Decisions Many organizations protect their applications through a collection of third-party technologies, including CDNs, bot management systems, web application firewalls (WAFs), and API security platforms. While these tools address different parts of the security environment, each may operate with only a partial view of the application.
Huskeys指出,这种分散化的状况会限制企业基于整体业务目标做出安全决策的能力。缺乏应用上下文信息的安全控制措施可能误阻合法流量,而恶意行为却有可能逃过检测。
Huskeys argues that this fragmentation limits the ability to make decisions based on the broader purpose of a request. Security controls that lack application context can block legitimate traffic, while malicious activity may escape appropriate scrutiny.
Profiling旨在帮助企业更全面地了解每个应用的具体情况:包括端点的使用方式、访问者身份、应用运行特征、现有安全控制措施,以及哪些业务流程需要重点防护。
Profiling is designed to build a more complete understanding of each application. It examines how endpoints are used, who accesses them, how the application behaves, which controls are already in place, and which business paths require particular attention.
这一功能并不仅限于发现应用资产或编制API目录,其核心目标是将应用活动与业务意图紧密关联,从而确保安全决策能够切实反映各项业务需求的重要性。
This goes beyond discovering assets or cataloging APIs. The goal is to connect application activity with business intent so that security decisions reflect the operational significance of a request.
“一个配置文件将问题从‘此流量看起来是什么样子?’转变为‘此流量对这家企业意味着什么?’” Huskeys 联合创始人兼首席技术官 Roy Weisfeld 表示。 “_大多数组织以相同的方式保护所有内容,就像一个购物中心,只有一支安保团队以相同方式守护每家店铺,无论是高端精品店还是小吃摊。我们为每家店铺配备专属安保人员,并根据其需求进行定制。当促销导致客流量增加三倍或新店开业时,我们的安保人员会实时调整。” ## 使加固成为持续过程 配置文件构成了 Huskeys 加固循环的基础,旨在将应用程序理解直接与安全改进连接起来。
“A profile changes the question from ‘What does this traffic look like?’ to ‘What does this traffic mean to this business?’” said Roy Weisfeld, Co-Founder and CTO of Huskeys. “Most organizations protect everything the same way, like a mall with one security team guarding every store identically, whether it’s a luxury boutique or a snack stand. We give every store its own dedicated guard, tailored to what it needs. When a sale triples the foot traffic or a new store opens, our guards adapt in real time.” ## Making Hardening a Continuous Process Profiling forms the foundation of Huskeys’ Hardening Loop, which is intended to connect application understanding directly to security improvements.

该流程始于对业务路径的配置文件。Huskeys 随后检测变化、滥用或暴露情况,并识别出可能具有高影响力的修复方案。客户在公司交付控制措施之前保留批准权;交付之后,系统会观察影响。
The process begins with a profile of the business path. Huskeys then detects changes, abuse, or exposure and identifies a potentially high-impact fix. Customers retain approval authority before the company delivers the control, after which the system observes the impact.
该结构旨在将安全运营从仅生成警报转变出来。与其要求团队独立调查每项发现并在断开的工具之间协调更改,Huskeys 旨在将已识别的问题与受影响应用程序特定的控制措施连接起来。
This structure is intended to move security operations beyond the production of alerts. Rather than requiring teams to investigate every finding independently and coordinate changes across disconnected tools, Huskeys aims to connect identified issues with controls specific to the affected application.
“一旦我们同时理解了应用程序、意图和业务路径,安全控制就可以针对客户进行范围划分,而不是依赖通用规则,”公司研究团队负责人 Yotam Mazurik 补充道。 “_配置文件为我们提供了上下文,使我们能够将检测转化为针对应用程序和业务路径的特定控制措施。客户决定;Huskeys 交付。” 该方法还体现了公司的观点:更快的响应并不是提升安全性的唯一方式。在应用程序周围部署适当的防护措施,可能帮助组织在攻击到达应用程序之前就应对暴露风险。
“Once we understand the application, the intent, and the business path together, security controls can be scoped to the customer instead of relying on generic rules,” adds Yotam Mazurik, the company’s Research Team Lead. “Profiling gives us the context to turn detection into a control that is specific to the application and the business path. The customer decides; Huskeys delivers.” The approach also reflects the company’s view that faster response is not the only way to improve security. Preparing appropriate protections around an application could help organizations address exposure before an attack reaches the application.
为何网络流量环境正在发生变化随着人工智能代理与人类用户及传统自动化系统共同与各类网络应用交互,应用安全形势变得愈发复杂。这些代理如今已能执行购物、交易等操作,导致仅凭流量特征已难以区分合法自动化行为与恶意活动。
Why the Traffic Environment Is Changing Application security is becoming more complicated as AI agents join human users and conventional automated systems in interacting with web applications. Agents are beginning to perform activities such as shopping and transactions, creating situations in which legitimate automation and malicious activity may appear similar when judged by traffic signals alone.
Huskeys援引Cloudflare 2026年的数据指出,在其网络环境中,自动化代理与爬虫产生的请求量占比已超半数。在此背景下,Huskeys认为准确掌握应用预期运行路径能为安全决策提供重要依据——据此可判定某项活动应被允许、需进一步验证还是直接拦截。
Huskeys cites Cloudflare’s 2026 data that automated agents and bots accounted for more than half of web requests across its network. In this environment, Huskeys believes understanding the intended application path can provide an additional basis for deciding whether activity should be allowed, challenged, or blocked.
该公司还强调,漏洞披露与实际被利用之间的时间间隔日益缩短,这促使企业必须重新审视安全运营机制。
The company also points to the shrinking interval between vulnerability disclosure and exploitation as a reason to rethink security operations.
“安全团队多年来始终致力于提升响应速度,”Weisfeld说道,“但我们认为还有另一种路径:在安全事件发生前明确关键风险点,从而彻底消除安全漏洞存在的窗口期,而非被动地与时间赛跑。”
“Security teams have spent years trying to respond faster,” Weisfeld said. “We believe there is another approach: understand what matters before the next incident, so you can remove the window instead of racing the clock.” ## Establishing a Foundation for Application-Aware Protection Huskeys Profiling is available in beta for close customers.
构建基于应用特征的安全防护体系Huskeys Profiling服务目前正处于测试阶段,仅向部分核心客户开放。据该公司介绍,该服务无需复杂的配置流程,客户数小时内即可体验到实际成效。
According to the company, implementation requires no special onboarding, and customers can begin seeing value within hours.
此次发布标志着Huskeys“网络边缘安全管理”(NESM)战略的进一步推进。其平台通过统一的智能代理层,将现有的内容分发网络、Web应用防火墙、云安全及网络边缘技术有机整合,旨在实现环境动态评估与安全策略的实时调整。
The launch advances Huskeys’ broader Network Edge Security Management (NESM) strategy. Its platform connects existing CDNs, WAFs, cloud security, and network edge technologies through a unified agentic layer, with the aim of continuously assessing environments and dynamically adapting policies.
通过融合应用上下文信息、经客户确认的安全规则及持续环境监测,Huskeys致力于打造贴合各应用特定风险与业务需求的安全防护方案。其核心理念十分明确:降低安全风险不应以牺牲正常业务运作为代价。
By combining application context, customer-approved security decisions, and ongoing assessment, Huskeys wants to make protection more specific to the risks and operational requirements of each application. The company’s approach centers on a simple premise: reducing exposure should not come at the expense of legitimate business activity.