Advisor
AppSec
Domains Application Security API Security
API Security
API security encompasses the processes, tools, and policies designed to protect application programming interfaces (APIs) from threats, misuse, and unauthorized access.
API security encompasses the processes, tools, and policies designed to protect application programming interfaces (APIs) from threats, misuse, and unauthorized access. This category focuses on safeguarding the integrity, confidentiality, and availability of data exchanged between applications, services, and users via APIs. Core capabilities include authentication and authorization of API requests, traffic monitoring, anomaly detection, threat prevention, and enforcement of security policies. Solutions may also provide vulnerability assessment, input validation, and protection against common attack vectors such as injection, data exposure, and denial-of-service targeting APIs. Technical scope often extends to both internal and external APIs, covering REST, SOAP, GraphQL, and other protocols. API security solutions are primarily used by security teams, DevOps engineers, and application developers who manage or integrate APIs within their environments. These stakeholders rely on such tools to ensure compliance, reduce risk, and maintain secure communication between distributed systems. Unlike broader application security or web security categories, API security specifically addresses the unique risks and attack surfaces associated with APIs. Cyberin serves as a platform for organizations to discover and compare API security solutions tailored to their needs.
76
Vendors
111
Products
130
Datapoints
3
Subcategories
Vendor Landscape how the vendors in this category relate
neutral · data-driven
Arrange bySimilarityThis categoryAppSec DomainThe Cyberin Framework (TCF)SeniorityEmployee countStock price
Related Wiki Articles
Some products are hidden. Sign up for free to see them all.
Filters
Subcategory, Integrations, Key features, Authentication Methods, Traffic Management +6 more Show ↓
Subcategory
All API Testing API Threat Protection API Security Gateways
Vendor
All Google Cloud IBM Kong Tyk F5 Akamai SmartBear Cloudflare + 68 more
Integrations
All SIEM CI/CD Kubernetes Istio Apigee Kong IdP Envoy
Key features
All Reporting Anomaly Detection Runtime Protection OWASP API Top 10 Protection Bot Mitigation Assertions API Discovery Collaboration
Authentication Methods
All API Key OIDC SAML LDAP JWT Bearer Token Basic Auth NTLM
Traffic Management
All Throttling Caching Timeouts Quotas Retries Circuit Breaker Load Balancing
Authentication & Authorization
All OAuth 2.0 OIDC JWT Validation API Keys MTLS
Security Features
All Rate Limiting TLS Termination Schema Validation WAF Threat Detection Data Masking Bot Mitigation
Deployment model
All SaaS Cloud On-premises Hybrid Cloud-Native Virtual appliance Self-Managed Edge
Compliance
All GDPR ISO 27001 SOC 2 PCI DSS HIPAA
CI/CD Integrations
All Jenkins GitHub Actions GitLab CI Azure DevOps CircleCI Not Applicable TeamCity
Cloud support
All AWS Azure Google Cloud Oracle Cloud
84 products
Sort:
Show:
Also in Application Security
Filter by Vendor
Google Cloud
4 products
IBM
4 products
Kong
4 products
Tyk
3 products
F5
3 products
Akamai
3 products
SmartBear
3 products
Cloudflare
3 products
NGINX
2 products
Fortinet
2 products
MuleSoft
2 products
42Crunch
2 products
Oracle
2 products
Microsoft
2 products
Rapid
2 products
Amazon Web Services
2 products
Barracuda
2 products
Radware
2 products
Broadcom
2 products
Fastly
2 products
Tricentis
2 products
Postman
2 products
Parasoft
1 product
Tencent Cloud
1 product
HTTP Toolkit
1 product
WSO2
1 product
Karate Labs
1 product
HTTPie
1 product
ReqBin
1 product
Gravitee
1 product
Wallarm
1 product
Grafana Labs
1 product
Palo Alto Networks
1 product
Data Theorem
1 product
Hurl
1 product
Cequence Security
1 product
BlazeMeter
1 product
Apidog
1 product
Traceable AI
1 product
Alibaba Cloud
1 product
Schemathesis
1 product
ThreatX
1 product
Milkman
1 product
Salt Security
1 product
Huawei Cloud
1 product
Apifox
1 product
Indusface
1 product
Apache
1 product
Keploy
1 product
Solo.io
1 product
Thunder Client
1 product
Red Hat
1 product
REST Assured
1 product
Testfully
1 product
Traefik Labs
1 product
Advanced REST Client
1 product
OWASP
1 product
Apimation
1 product
KrakenD
1 product
Hoppscotch
1 product
Bright Security
1 product
Loadmill
1 product
Sensedia
1 product
OpenText
1 product
Bruno
1 product
StackHawk
1 product
Katalon
1 product
Imperva
1 product
PactFlow
1 product
TIBCO
1 product
Axway
1 product
PortSwigger
1 product
Firecamp
1 product
Software AG
1 product
SAP
1 product
Sauce Labs
1 product
0 selected
Compare
Looking for the best API Security tool? Our Advisor can help you compare.
Ask the Advisor
CYBERIN ADVISOR