API Security

API Discovery and Protection

Inventory APIs, test their authorization logic, and watch runtime traffic for abuse.

9 tools profiled

How it differs Discovers, tests and protects APIs specifically, often working from the OpenAPI contract or live traffic. General web scanning of the same endpoints is DAST.

6 tools match

Sort

Active Splunk Clear all

Akamai API Security (Noname)

Akamai

API Security

API discovery, posture management and runtime threat detection built on the Noname platform, analyzing traffic out of band across gateways and clouds.

Commercial

Established Compare Akamai API Security (Noname)
Cequence Security

Cequence Security

API Security

Unified API protection platform combining external attack surface discovery, API posture analysis and machine learning driven bot and abuse defense.

Commercial

Established Compare Cequence Security
Imperva API Security

Imperva (Thales)

API Security

API discovery, risk classification and schema based protection delivered through Imperva's application security platform and cloud WAF.

Commercial

Established Compare Imperva API Security

Akamai API Security (Noname)

Akamai

API discovery, posture management and runtime threat detection built on the Noname platform, analyzing traffic out of band across gateways and clouds.

Commercial Established

API Security Compare Akamai API Security (Noname)
Cequence Security

Cequence Security

Unified API protection platform combining external attack surface discovery, API posture analysis and machine learning driven bot and abuse defense.

Commercial Established

API Security Compare Cequence Security
Imperva API Security

Imperva (Thales)

API discovery, risk classification and schema based protection delivered through Imperva's application security platform and cloud WAF.

Commercial Established

API Security Compare Imperva API Security

Salt Security

Salt Security

API Security

API security platform that mirrors traffic to a cloud engine and correlates attacker behavior over extended periods to detect API abuse and discovery.

Commercial

Established Compare Salt Security
Traceable AI

Harness

API Security

API security platform that uses distributed tracing to capture full request context, driving discovery, threat detection and API security testing.

Commercial

Established Compare Traceable AI
Wallarm

Wallarm

API Security

Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

Commercial

Established Compare Wallarm

Salt Security

Salt Security

API security platform that mirrors traffic to a cloud engine and correlates attacker behavior over extended periods to detect API abuse and discovery.

Commercial Established

API Security Compare Salt Security
Traceable AI

Harness

API security platform that uses distributed tracing to capture full request context, driving discovery, threat detection and API security testing.

Commercial Established

API Security Compare Traceable AI
Wallarm

Wallarm

Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

Commercial Established

API Security Compare Wallarm

Pick at least one more