
open-appsec
The facts below are what the maker publishes about open-appsec, checked and dated. Our editors have not written about it yet.
Plans and prices
From open-appsec's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Premium Edition — Quarterly subscription | $99 a month | 5M requests/month · additional requests: 6 USD for each 1M requests/month · 297 USD quarterly payment |
| Premium Edition — Monthly subscription | $109 a month | 1M requests/month · additional requests: 7 USD for each 1M requests/month |
| Premium Edition — Yearly subscription | $948 a year | 10M requests/month · additional requests: 5 USD for each 1M requests/month · 948 USD yearly payment |
The facts
Each one read from open-appsec's own pages, with the date it was checked.
What it does
- API security
- API protection can block malicious payloads in all editions, while OpenAPI schema enforcement is a Premium feature.checked 11 Oct 2026
- Configuration
- The product supports declarative management using Helm, Kubernetes annotations, Terraform, and a GraphQL API.checked 11 Oct 2026
- Deployment
- The agent can be deployed on Kubernetes, Linux, or Docker, integrated with supported web servers and gateways.checked 11 Oct 2026
- Integrations
- The maker documents integrations including NGINX, NGINX Ingress, Kong, APISIX, Envoy, Istio, NGINX Proxy Manager, NPMplus, and Docker SWAG.checked 11 Oct 2026
- Local inspection
- Security processing is performed locally, so sensitive data stays within the protected environment and traffic processing does not depend on third-party uptime.checked 11 Oct 2026
- Premium features
- The maker lists anti-bot protection, file security, and IPS protection for more than 2,800 web CVEs as Premium Edition features.checked 11 Oct 2026
- Premium pricing limits
- The pricing page lists monthly request allowances and extra-request charges for its yearly, quarterly, and monthly Premium subscriptions.checked 11 Oct 2026
- Purpose
- open-appsec is an open-source web application and API security solution powered by machine learning that analyzes HTTP/S requests and blocks malicious activity.checked 11 Oct 2026
- Rate limiting
- Community Edition rate limiting can use IP addresses; Premium Edition can also use keys in JWTs, cookies, or headers.checked 11 Oct 2026
- Secure communication
- The maker says agents communicate with its Fog service over encrypted HTTP/TLS on port 443, with OAuth 2.0 authentication and a 256-bit key for one-time registration.checked 11 Oct 2026
- Support
- The support page directs users to troubleshooting and a form, and asks them to submit diagnostic information through a secure channel if an issue remains unresolved.checked 11 Oct 2026
- WAF protection
- Its machine-learning WAF aims to protect against OWASP Top 10 and zero-day attacks without requiring threat signature updates.checked 11 Oct 2026
The company
- Maker
- The open-appsec site identifies Check Point Software Technologies Ltd. as its operator.checked 11 Oct 2026
Alternatives to open-appsec
- 1

Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 2
DNSFilter
AndroidiOSWebAPI7.8From $1 a month - 3
MalCare
Free planWebSelf-hosted6.9From $99 a year - 4

DataDome API Protection
AndroidiOSWebAPI6.8From $3,830 a month - 5

Gcore WAAP
Free planWebAPI6.8From €25 a month - 6
Wordfence Security
Free planWebSelf-hosted6.8From $149 a year
