Imperva API Security

What Imperva API Security is

Imperva API Security manages API discovery, risk assessment, threat detection, and mitigation in a console for cloud, on-premises, and hybrid environments. It continuously finds and monitors public, private, and shadow APIs, tracks changes, and identifies design flaws and vulnerabilities. Ongoing assessments address risks associated with the OWASP API Security Top 10. Its machine-learning-driven BOLA detection profiles traffic, identifies behavioral deviations, and can block Broken Object Level Authorization exploits. API Security Testing scans uploaded API specifications for posture gaps, design flaws, configuration weaknesses, and risky endpoints. Deployment choices include cloud-managed or self-managed management and agent-based or agentless setups. Integrations include Kong, Mulesoft, Azure APIM, Apigee, and F5. The product can classify APIs by sensitive-data categories such as government ID, payment-card details, addresses, and other personally identifiable information. Used with Imperva’s application security platform, it protects against nine OWASP API Top Ten risks; Unsafe Consumption of APIs is the exception. A 30-day trial may be limited to 100 Mbps, and traffic exceeding that threshold may be null-routed. Pricing is available on request.