API Security Tools

Acquired by Akamai. noname built an API security tool the way a network engineer would, and the Akamai acquisition makes sense. They build maps of API's based on network logs, and alert with anomaly detection. That puts them in an awkward middle position compared to eBPF based solutions like Impart, or more developer focused tools like StackHawk or Escape. The response actions are building WAF rules and they're building testing functionality.

Acquired by Harness. Traceable has built some amazing API security capabilities thanks to starting with tracing as their beginning. They do a great job patching information together in a way that makes it relevant for investigations

Impart has everything you'd want in an API security platform - they provide discovery, testing, and protection all in a single platform based on eBPF for network detection and prevention. They are more on the runtime side of API security.

Wallarm is one of the most robust and mature of API security vendors. They offer a ton of features - from API like runtime protection, to secrets detection, to static security testing.

AWS WAF offers amazing out of the box protection with numerous rule packs, and integrates with more advanced rules if necessary. The only essential consideration and downside is their 16KB limit on request size which can be a breaking downside for some applications.

Levo does a ton of neat stuff with only a lightweight ebpf agent. They create full API schemas which can be real sources of truth, detect version changes, run DAST testing, and look for missing auth tokens. This covers areas where I most commonly see misconfigurations lead to actual exploits - accidental configs of public APIs without authentication. They are more on the testing side of API security.

AppSentinels is a robust runtime oriented API security platform that builds robust service mappings and has very good detection and response features. It's a very competitive offering to those like NoName, Salt, and Traceable.

I've requested a couple demos from Salt and they never replied ¯\_(ツ)_/¯. Based on an article from a couple years ago it seems like they mirror all your network traffic into their environment to model your APIs, but their marketing does say AI a few more times. It's funny that their marketing image has 1699 total events and 1696 of them were suspicious.

Firetail offers API discovery via cloud logs or code scanning, can do log enrichment and anomaly detection, and a library that can wrap your application.