StarCross Technology (Xinglan Technology)

StarCross Technology (Beijing Xinglan Technology Co., Ltd.) is a cybersecurity firm established in November 2018 with a focus on API security. The company, headquartered in Beijing with offices in Shanghai and Shenzhen, leverages security attack and defense technology alongside data intelligence to address modern digital security challenges. The founding team includes CEO Wang Yu, a Tsinghua University alumnus and member of the renowned "Blue Lotus" security team, and other young security experts with backgrounds from institutions like Peking University, Georgia Tech, and companies such as Alibaba and Amazon Web Services. This team possesses significant experience in offensive and defensive security, with achievements in numerous international Capture the Flag (CTF) competitions.

StarCross Technology provides enterprise-level API security solutions centered around its core product, the "Yinghuo" (Firefly) Security Analysis Platform. This platform offers comprehensive API asset identification, advanced threat detection, and complex behavior analysis to establish a robust API Runtime Protection system. It is designed to help clients in sectors like finance, internet, and technology to map out API security risks, prevent intrusions, and mitigate data leakage. The platform provides real-time monitoring and visualization of API usage and anomalous activities. By employing cloud-native data collection and analysis, the system automatically identifies APIs, detects vulnerabilities, and provides actionable recommendations for remediation. The business model appears to be B2B, providing its security platform and solutions directly to companies. The company has successfully raised significant funding, including a Pre-A+ round of over 100 million RMB in November 2021, led by Apple Capital with participation from previous investors.

Keywords: API security, cybersecurity, runtime protection, threat detection, data intelligence, network security, threat analysis, vulnerability management, cloud-native security, financial technology security, application security, risk management, data leakage prevention, security analytics, intrusion detection, Beijing, Wang Yu