AppSecNews

API Security

API Discovery and Protection

Inventory APIs, test their authorization logic, and watch runtime traffic for abuse.

9 tools profiled

How it differs Discovers, tests and protects APIs specifically, often working from the OpenAPI contract or live traffic. General web scanning of the same endpoints is DAST.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

3 tools match

  • Levo.ai

    Levo.ai

    API Security

    API security platform that uses eBPF sensors to catalog APIs from live traffic, trace sensitive data flows, and drive automated security testing.

    Commercial
    Growing
  • Traceable AI

    Harness

    API Security

    API security platform that uses distributed tracing to capture full request context, driving discovery, threat detection and API security testing.

    Commercial
    Established
  • Wallarm

    Wallarm

    API Security

    Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

    Commercial
    Established
  • Levo.ai

    Levo.ai

    API security platform that uses eBPF sensors to catalog APIs from live traffic, trace sensitive data flows, and drive automated security testing.

    Commercial Growing
    API Security
  • Traceable AI

    Harness

    API security platform that uses distributed tracing to capture full request context, driving discovery, threat detection and API security testing.

    Commercial Established
    API Security
  • Wallarm

    Wallarm

    Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

    Commercial Established
    API Security
Tick up to 4 tools above.