Wallarm API Security

Visit site Alternatives

Score6.9

Rank#4 of 30

PriceFree

Free planYes

Runs onAPI, Linux, Self-hosted, Web

Summary

Wallarm API Security discovers APIs and protects them in real time against OWASP API Top 10 attacks, abuse, and account takeover. It covers REST, GraphQL, gRPC, SOAP, and WebSocket APIs without needing an API specification. The product can find shadow, zombie, and rogue APIs and build OpenAPI specifications from live traffic. It blocks attacks such as injection, BOLA, broken authentication, and zero-day exploits, while behavior analysis detects credential stuffing, malicious bots, account takeover, and L7 DDoS. It can surface APIs handling personal, payment, credential, or health data and map that data to compliance scope. API Leak Management scans public sources for keys, tokens, and credentials associated with customer domains. Deployment options include managed Security Edge and self-hosted Kubernetes, cloud VM, and API gateway connector setups. The free tier allows 500,000 requests per month for three users per company and excludes vulnerability assessment and API Abuse Prevention. Beyond the quota, console access and integrations are disabled. Paid plans require contacting sales for pricing.

Who it is for

It suits organizations that need to discover and protect APIs across the listed protocols, including teams with managed or self-hosted deployment needs. The free tier is an option for use within its monthly request and user limits.

What is good

Covers five API protocol types without a specification.
Can discover shadow, zombie, and rogue APIs.
Offers managed and self-hosted deployment options.
Free tier includes up to 500,000 requests monthly.

What to know first

Free tier is limited to three users per company.
Free tier excludes vulnerability assessment and API Abuse Prevention.
Console access and integrations disable after quota is exceeded.
Paid plan pricing requires contacting sales.

Verdict

Wallarm API Security combines API discovery, runtime protection, abuse detection, and sensitive-data visibility. The free tier has explicit request and feature limits, while core paid subscription pricing is available by contacting sales.

Wallarm API Security plans and pricing

All plans

Security Edge Free Tier Free Up to 500,000 requests/month · 3 users/company · excludes vulnerability assessment and API Abuse Prevention docs.wallarm.com · 29 Sept 2026

WAAP + Advanced API Security Not published Pricing by request to sales · 6 months event storage · unlimited users docs.wallarm.com · 29 Sept 2026

Cloud Native WAAP Not published Pricing by request to sales · supports all API protocols · 6 months event storage · unlimited users docs.wallarm.com · 29 Sept 2026

Compared on web application firewall software

Free plan: Yeswallarm.com
API discovery: Yeswallarm.com
Runtime protection: Yeswallarm.com
API posture management: Yeswallarm.com
Sensitive data detection: Yeswallarm.com
Specification governance: Yeswallarm.com
Deployment model: hybridwallarm.com

Facts

Product: Wallarm API Security discovers APIs and protects them in real time against OWASP API Top 10 attacks, abuse, and account takeover.wallarm.com · 29 Sept 2026
Protocols: The product covers REST, GraphQL, gRPC, SOAP, and WebSocket APIs without requiring an API specification.wallarm.com · 29 Sept 2026
Attack protection: It blocks attacks including injection, BOLA, broken authentication, and zero-day exploits in real time.wallarm.com · 29 Sept 2026
Abuse prevention: It detects credential stuffing, account takeover, malicious bots, and L7 DDoS using behavior analysis.wallarm.com · 29 Sept 2026
Sensitive data: It surfaces APIs moving personal, payment, credential, or health data and maps that data to compliance scope.wallarm.com · 29 Sept 2026
Leaked credentials: API Leak Management scans public sources for API keys, tokens, and credentials associated with customer domains.wallarm.com · 29 Sept 2026
Integrations: The product page lists Splunk, Sumo, QRadar, Jira, PagerDuty, OpsGenie, and Slack for event routing.wallarm.com · 29 Sept 2026
Deployment: Wallarm supports managed Security Edge deployment and self-hosted deployment options including Kubernetes, cloud VMs, and API gateway connectors.docs.wallarm.com · 29 Sept 2026
Paid plans: Wallarm says core subscription plans are activated by contacting sales.docs.wallarm.com · 29 Sept 2026
Free tier limits: The Security Edge Free Tier allows 500,000 requests per month and disables console access and integrations after the monthly quota is exceeded.docs.wallarm.com · 29 Sept 2026
Compliance: Wallarm states that it is SOC 2 Type 2 compliant.wallarm.com · 29 Sept 2026