Enhancing API Security and Governance for Thrive TRM with Data Theorem

• Application Infrastructure & Middleware - API Integration & Management
• Application Infrastructure & Middleware - Event-Driven Application

• National Security & Defense

• Quality Assurance

• Leasing Finance Automation
• Tamper Detection

• Cloud Planning, Design & Implementation Services
• System Integration

Thrive TRM, a leading provider of modern recruiting software for executive search firms, faced a significant challenge in securing their application’s full stack. The security team at Thrive TRM was constantly discovering new attack surfaces within both client and cloud endpoints. They needed a solution that could not only secure these surfaces but also track and discover any new APIs. The team was also in search of a Security Orchestration Automation and Response (SOAR) platform that could meet these needs. During application penetration testing, Thrive realized the importance of assessing the risk associated with their application’s attack surface. They found that while some tools could identify application attack surfaces, they often failed to identify data that circumvented network firewalls and WAFs, and daily changes that kept up with the CI/CD lifecycle. This left their application vulnerable to attackers.

Thrive TRM is a software company established in 2014 that provides modern recruiting software built for the fastest growing executive search firms. They serve Fortune 100 companies, providing them with a talent database of eligible candidates for hard-to-recruit positions. Thrive develops cutting-edge applications that help recruiters and talent executives make better hiring decisions. Their collaborative, easy-to-use features allow users to spend less time managing a database and more time advising the hiring team. Elite search firms, VC/PE firms, and in-house recruiters around the globe use Thrive TRM to reduce search times and improve outcomes for hiring managers. Therefore, it is crucial for Thrive to protect the data of these high-ranking professionals.

Thrive TRM chose Data Theorem as their solution provider, impressed by its ability to identify data leakage that had previously gone undetected. They found that they needed API security beyond what their cloud provider prescribed to them. Data Theorem's automated process of creating secure code for developers and the ability to test different solutions by scanning before going into production proved immensely beneficial. The Thrive team expanded their use of the product to 17 users. Furthermore, Thrive leveraged the Data Theorem platform to enforce corporate governance policies. When issues were found by the Data Theorem analyzer engine, they were automatically flagged with remediation details. The Data Theorem support team also provided additional information on each issue, informing Thrive about what data was at risk and how hackers could exploit these vulnerabilities.

• After implementing Data Theorem solutions, Thrive TRM saw significant improvements in their TRM security responses. As recruitment personnel and strategies transition to a fully virtual model, Data Theorem has become vital in providing the necessary support for Thrive to evolve seamlessly towards a cloud-oriented business model. This partnership has allowed Thrive and Data Theorem to find a new normal in the industry and better prepare for the future. The Data Theorem support team has acted as Thrive’s go-to security experts, providing additional information on each issue and informing Thrive about what data is at risk and how hackers can exploit these vulnerabilities.