Traceable API Security Platform

What Traceable API Security Platform is

Traceable API Security Platform provides application and API security spanning posture management, threat protection, and threat management across the software development lifecycle. It continuously discovers APIs and builds an inventory that can include internal, private, public, rogue, shadow, partner, and third-party APIs. Discovery sources include cloud and on-premise environments, code components, API management integrations, network traffic endpoints, and workloads via eBPF. Security and data-flow analytics support teams investigating issues and attacks. Traceable says its production protections detect and block known and unknown attacks, business-logic abuse, DDoS, abusive bots, and sensitive-data exfiltration. API testing uses active API traffic for context and does not require configuration or OpenAPI files or Postman collections. Deployment choices include self-managed on-premise or cloud, cloud environments on AWS, GCP, or Azure, customer datacenters, and SaaS. Documentation lists REST, SOAP, gRPC, GraphQL, and WebSocket APIs, with WebSocket coverage limited to the handshake call. Learned APIs remain listed for 90 days after observed traffic ends; APIs under learning remain listed for 30 days. Pricing is available by demo request, with no public price or plan limits stated.