Tools for securing APIs against vulnerabilities, abuse, and unauthorized access.
Auth0 (by Okta) is an identity platform providing authentication, authorization, and user management APIs for web, mobile, and legacy applications with support for social login, SSO, and MFA...
Amazon Web Services (AWS) is the world's most comprehensive cloud computing platform, offering over 200 fully featured services including compute, storage, databases, machine learning, and A...
Anthropic is an AI safety company that builds Claude, a family of large language models designed for helpfulness, harmlessness, and honesty, available through API and the Claude.ai consumer...
Falco is an open-source cloud-native runtime security project that detects unexpected application behavior and threats in real time.
Automated moving target defense for API identity
Abnormal Security uses behavioral AI to detect and prevent email attacks including business email compromise, phishing, and account takeover.
Developer-friendly DAST for APIs and applications
Cequence Security provides API security and bot management that protects business-critical applications from automated attacks, abuse, and fraud.
Application security platform providing API discovery, testing, and runtime protection via agentless deployment.
CircleCI is a continuous integration and delivery platform that automates build, test, and deployment pipelines. It supports cloud and self-hosted environments with powerful parallelism and...
API observability and security platform providing automated API documentation, security testing, and runtime monitoring.
ContractPodAi (now Leah) is an AI-powered contract lifecycle management platform that helps enterprises build, orchestrate, and govern intelligent AI agents across legal, procurement, and fi...
Machine identity and API access security
Unified runtime application and API security platform combining WAF, API security, and bot defense in a single cloud-native sensor.
Open-source API security platform providing code-level API protection with real-time threat detection and API catalog management.
Cybereason provides endpoint detection and response (EDR/XDR) with automated investigation and remediation powered by AI-driven security analytics.
Akamai is the world's largest CDN and edge computing platform, delivering and securing web content, applications, and APIs for global enterprises.
API security platform providing automated discovery, vulnerability detection, and real-time protection for APIs and microservices.
API security platform providing full lifecycle API governance from design through runtime with automated discovery and risk assessment.
Bearer is an open-source static analysis tool that scans code for security risks and data privacy violations in application code.
Outshift by Cisco's CNAPP platform delivering cloud security with API security and Kubernetes visibility.
Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.
API security platform providing design-time audit, runtime protection, and conformance scanning for OpenAPI-defined APIs.
Cohere is an enterprise AI platform providing large language models for text generation, embeddings, and retrieval-augmented generation, with a focus on private deployment and data security.
Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.
Pangea offers developer-facing security building blocks such as vaulting, redaction, audit logging, and secure share capabilities through APIs.