AppSecNews

API Security

API Discovery and Protection

Inventory APIs, test their authorization logic, and watch runtime traffic for abuse.

9 tools profiled

How it differs Discovers, tests and protects APIs specifically, often working from the OpenAPI contract or live traffic. General web scanning of the same endpoints is DAST.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

3 tools match

Active Slack Clear all

  • APIsec

    APIsec.ai

    API Security

    Automated API penetration testing that generates role aware test cases from a specification to probe authorization and business logic flaws.

    Freemium
    Growing

  • Levo.ai

    Levo.ai

    API Security

    API security platform that uses eBPF sensors to catalog APIs from live traffic, trace sensitive data flows, and drive automated security testing.

    Commercial
    Growing

  • Wallarm

    Wallarm

    API Security

    Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

    Commercial
    Established

  • APIsec

    APIsec.ai

    Automated API penetration testing that generates role aware test cases from a specification to probe authorization and business logic flaws.

    Freemium Growing
    API Security

  • Levo.ai

    Levo.ai

    API security platform that uses eBPF sensors to catalog APIs from live traffic, trace sensitive data flows, and drive automated security testing.

    Commercial Growing
    API Security

  • Wallarm

    Wallarm

    Inline API security and WAAP platform using grammar based payload parsing for detection, with traffic derived API discovery and attack replay testing.

    Commercial Established
    API Security
Tick up to 4 tools above.