For modern security operations centers (SOCs), the paradigm of "detect and respond" is becoming increasingly untenable. As web applications grow in complexity and the digital surface area expands, the sheer volume of alerts generated by fragmented security stacks is leading to fatigue, misprioritization, and, ultimately, vulnerability. Recognizing this systemic failure, cybersecurity firm Huskeys has officially unveiled "Profiling," a new capability designed to transform how organizations view, manage, and protect their web applications and APIs.
By shifting the focus from simple traffic analysis to a deep, business-aware understanding of application behavior, Huskeys is attempting to move the industry away from generic, "one-size-fits-all" security rules toward a more granular, context-driven model.
The Core Challenge: The Context Gap in Security
In the current threat landscape, most organizations rely on a patchwork of defense technologies: Content Delivery Networks (CDNs), bot management solutions, Web Application Firewalls (WAFs), and dedicated API security platforms. While each of these tools is effective in its own silo, they suffer from a fundamental lack of cohesion.
A WAF might see a suspicious request and block it based on a signature, but it lacks the visibility to know if that request was part of a critical business workflow or a benign user interaction. This "context gap" often leads to two negative outcomes: either legitimate traffic is inadvertently blocked—causing operational friction—or malicious actors masquerading as legitimate users slip through the cracks because their activity doesn’t trigger a specific, narrow rule.
Huskeys argues that security teams are currently forced to play a game of "whack-a-mole," responding to threats only after they are identified. The company’s new Profiling feature aims to flip this model by establishing a baseline of "business intent."
Chronology of a Shift: Why Now?
The launch, which was first reported by SiliconANGLE, comes at a pivotal moment in the evolution of the internet. The following timeline highlights the factors driving this industry shift:
- Early 2020s: The rise of API-first architectures and microservices leads to an explosion of endpoints. Security teams struggle to map these assets, leading to the "Shadow API" crisis.
- 2025: The mainstream adoption of autonomous AI agents begins to blur the lines between human and machine traffic. Security teams find it increasingly difficult to distinguish between beneficial automation (like a shopping bot) and malicious exploitation.
- October 2026: Cloudflare reports that automated agents and bots now account for more than 50% of all web requests. This statistic serves as the catalyst for Huskeys to formalize its Profiling strategy.
- Mid-October 2026: Huskeys officially launches Profiling, moving its Network Edge Security Management (NESM) strategy into a new phase of proactive, business-aware protection.
Supporting Data: The Rise of the Agentic Internet
The urgency behind Huskeys’ launch is rooted in data that suggests the internet is undergoing a structural change. With AI agents now capable of performing complex transactions—from automated procurement to AI-driven shopping—the traditional markers used to identify "bad" traffic are no longer reliable.
According to 2026 data from Cloudflare, the sheer volume of bot-driven traffic has eclipsed human activity. This creates a "signal noise" problem: when half of all traffic is automated, security tools that rely on broad traffic patterns are prone to massive false-positive rates.
Furthermore, the time-to-exploit window has collapsed. Vulnerabilities are being weaponized within hours of disclosure, meaning that organizations can no longer afford to spend days or weeks tuning their firewalls after an incident has been reported. The need for a system that can "harden" an application before an attack occurs has transitioned from a best practice to a survival necessity.
Official Perspectives: The Philosophy of the "Dedicated Guard"
Roy Weisfeld, Co-Founder and CTO of Huskeys, provides a vivid analogy to explain the shift in philosophy. "Most organizations protect everything the same way, like a mall with one security team guarding every store identically, whether it’s a luxury boutique or a snack stand," Weisfeld explains.
He argues that a luxury boutique (a high-value, high-risk application) requires a different level of scrutiny and a different set of rules than a snack stand (a low-risk, public-facing informational page). By building a profile that includes endpoint usage, user behavior, existing controls, and business-critical paths, Huskeys allows organizations to deploy "dedicated guards" for every digital asset.
"When a sale triples the foot traffic or a new store opens," Weisfeld adds, "our guards adapt in real time."
Yotam Mazurik, the company’s Research Team Lead, emphasizes that this is not just about discovery. "Once we understand the application, the intent, and the business path together, security controls can be scoped to the customer instead of relying on generic rules," Mazurik notes. "Profiling gives us the context to turn detection into a control that is specific to the application and the business path. The customer decides; Huskeys delivers."
The "Hardening Loop": A Continuous Improvement Cycle
At the heart of the new offering is what Huskeys calls the "Hardening Loop." This process is designed to move security operations away from the reactive nature of alerts and toward a continuous state of improvement:
- Baseline Profiling: The system maps the business path, identifying which endpoints are critical and how they are intended to be used.
- Detection and Analysis: Huskeys monitors for deviations, abuse, or exposure.
- Actionable Recommendation: Rather than simply dumping a raw alert on a security analyst, the system identifies a high-impact fix.
- Human-in-the-Loop Approval: The customer retains final authority, ensuring that security measures never inadvertently disrupt the business.
- Validation: The system observes the impact of the new control, closing the loop and refining the profile further.
This structure directly addresses the "alert fatigue" that plagues modern SOCs. By connecting identified issues with specific, pre-approved controls, Huskeys reduces the time-consuming process of investigating every minor finding independently.
Implications: Moving Toward "Governed Cybersecurity"
The implications of Huskeys’ strategy are far-reaching. By providing a unified agentic layer that connects CDNs, WAFs, and cloud security, the company is positioning itself to become the "brain" of the network edge.
1. The Death of Generic Rules
The industry has long suffered from the limitations of WAFs that rely on static regex rules. If Huskeys succeeds in making application-aware security the standard, we may see a decline in the use of broad, blunt-force security policies that often break legitimate web applications.
2. Operational Efficiency
For CISOs, the primary draw is the potential for efficiency. By automating the mapping of business paths and the delivery of specific controls, teams can reallocate their human talent to higher-level strategic work, rather than manual policy tuning.
3. A Proactive Stance Against Zero-Days
The most compelling promise of the Profiling approach is the ability to "remove the window" of vulnerability. By hardening an application based on its specific business logic, organizations can theoretically block attack vectors that haven’t even been discovered yet. If an attacker tries to exploit a path that the business never uses, the system’s deep context will identify the anomaly regardless of the specific exploit code being used.
Conclusion: The Future of the Network Edge
Huskeys Profiling is currently available in beta for select customers, with the company claiming that implementation requires no specialized onboarding and provides value within hours. While the technology is still in its early stages, the shift toward business-aware security represents a necessary maturation of the cybersecurity industry.
As AI agents and automated traffic continue to dominate the digital landscape, the distinction between "traffic" and "business intent" will become the most important metric for security teams. Huskeys is betting that the companies that win in 2027 and beyond will be those that stop treating security as a technical exercise and start treating it as a business-driven operational requirement.
In a world where security teams are perpetually racing against the clock, Huskeys is attempting to change the rules of the race entirely. By knowing what matters before an incident occurs, they hope to give organizations the tools to stop being victims of circumstance and start being architects of their own digital resilience.
