Case Study: Sigma Computing achieves complete GraphQL API coverage with Escape

Sigma Computing achieves 100% GraphQL API coverage with Escape

Sigma Computing, a cloud-native analytics and data application platform, faced significant challenges in securing its predominantly GraphQL API surface. Their existing DAST tool, which was REST-centric, provided inadequate coverage and generated false positives, creating a maintenance burden without delivering actionable results. They needed a GraphQL-native solution from a vendor like Escape to achieve complete endpoint coverage and find real, exploitable vulnerabilities.

Escape implemented its GraphQL-native DAST scanner, which was deployed in-cluster within Sigma's Kubernetes environment. The solution provided schema-first scanning, AI-assisted crawling, and detailed logs for full transparency. As a result, Sigma achieved 100% confidence in their endpoint coverage, slashed their triage time with exploitability evidence, and uncovered critical vulnerabilities like MySQL instances with default credentials that previous tools had missed.

Sigma Computing