17.8
APIPosture is self-hosted software that scans source code for potential API security and configuration issues.
Free planOpen sourceLinuxmacOSSelf-hosted
Alternatives to 42Crunch API Security Platform
42Crunch API Security Platform centers on contract-driven API security. It generates static and dynamic tests from OpenAPI definitions, maps findings to the OWASP API Security Top 10, and uses a runtime micro-firewall to block traffic outside the API contract. It also discovers MCP servers and generates contracts for their tools, resources, and prompts, with findings mapped to several AI and security frameworks. Free and paid plans, IDE and CI/CD integrations, and cloud,…
27.8
Onam Security API Security discovers API endpoints across cloud environments and checks their configurations against 241 application and API security rules.
Free planWebAPILinux
37.5
APISec Platform is an AI-based application security platform for validating exploits against APIs and applications.
Free planWebAPIExtension
- 4
DataDome API Protection
DataDome API Protection monitors API traffic in real time to detect and block automated threats, fraud, and unauthorized access.
AndroidiOSWebAPI6.8From $3,830 a month - 5
Haltdos
Haltdos provides security and delivery tools for web applications and APIs across on-premise, cloud, and hybrid environments.
Free planWebAPILinuxSelf-hosted6.8From $30 a month - 6
apPosture API Security
apPosture API Security inventories API endpoints and helps teams prioritize security risks.
WebAPILinuxSelf-hosted6.7From $35 a month - 7
Checkmarx API Security
Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs.
WebAPIExtensionLinux6.5 - 8
Imperva API Security
Imperva API Security manages API discovery, risk assessment, threat detection, and mitigation in a console for cloud, on-premises, and hybrid environments.
WebAPISelf-hosted6.5 - 9
Palo Alto Networks Cortex Cloud API Security
Palo Alto Networks Cortex Cloud API Security discovers, prioritizes, and protects APIs across cloud environments.
WebAPILinux6.2 - 10
Wallarm API Security
Wallarm API Security discovers APIs and protects them in real time against OWASP API Top 10 attacks, abuse, and account takeover.
Free planWebAPILinuxSelf-hosted6.2Free plan - 11
Cisco Panoptica
Cisco Panoptica is a cloud-native security solution for identifying, prioritizing, and remediating risks across multi-cloud environments.
Free planWebAPILinuxSelf-hosted6.1Free plan - 12
ThreatX API and Application Protection
ThreatX API and Application Protection is a paid managed platform that monitors API and application traffic and blocks attacks in real time.
WebAPISelf-hosted6.1 - 13
Akto API Security Platform
WebAPILinuxSelf-hosted6.0 - 14
CyanoRisk API Security Posture Management
CyanoRisk API Security Posture Management discovers, inventories, classifies, maps, and continuously assesses REST, GraphQL, gRPC, and SOAP APIs.
APISelf-hosted5.8 - 15
APIDynamics
APIDynamics is a unified API and AI security platform built around Zero Trust.
WebAPISelf-hosted5.7 - 16
Datadog App & API Protection
WebLinuxmacOSWindows5.7From $31 a month - 17
Traceable API Security Platform
Traceable API Security Platform provides application and API security spanning posture management, threat protection, and threat management across…
WebSelf-hosted5.7 - 18
Radware API Security Service
Radware API Security Service provides API security across discovery, posture management, testing, and runtime protection, using live traffic to assess API behavior.
WebAPISelf-hosted5.6 - 19
Escape
Escape is an offensive security platform that brings together attack surface management, business-logic-aware dynamic application security testing…
WebAPI5.5 - 20
Prophaze API Security
Prophaze API Security discovers APIs, analyzes their activity, and applies security policies across deployments.
WebAPISelf-hosted5.5 - 215.5
- 22
Salt Security API Protection Platform
Salt Security API Protection Platform helps security teams discover and manage APIs and AI agents, and protect them from runtime threats.
WebAPISelf-hosted5.4 - 23
Check Point WAF (formerly CloudGuard WAF)
Check Point WAF, formerly CloudGuard WAF, protects web and API assets through a hybrid deployment model.
WebAPI5.1 - 245.0
- 254.9
- 26
4.8 - 27
Microsoft Defender for Containers
Microsoft Defender for Containers is a paid, web-based security offering with a hybrid deployment model.
Web4.8 - 28
Akamai API Security
Akamai API Security helps organizations discover APIs and manage security risks across them.
Web4.7 - 29
Cequence Unified API Protection
Cequence Unified API Protection is a web-based platform for finding and protecting APIs.
Web4.7