API security
Discovery, testing and runtime protection of application programming interfaces.
26 vendors · alphabetical
- 42Crunch42Crunch sells a platform for governing the security of MCP servers, APIs and AI agents at enterprise scale. 42Crunch says it helps enterprises bring AI security under control. 42Crunch describes the job as discovering every MCP server that AI agents expose or consume, securing each one against attack, and assessing compliance with AI regulations and security frameworks.Ownership not established · primary category
- A10 NetworksA10 Networks sells security solutions, infrastructure solutions, and centralized management and automation solutions for applications and networks.Public (NYSE: ATEN)
- AppdomeAppdome is an agentic platform that builds and maintains security, anti-fraud and other defenses in Android and iOS apps.Ownership not established
- AssailAssail sells Ares, an autonomous offensive security platform that tests applications, APIs, mobile apps and AI systems and shows what an attacker could actually reach.Privately held
- Astra SecurityAstra Security sells a platform that performs continuous offensive pentests across apps, APIs and cloud.Privately held
- Beagle SecurityBeagle Security's platform automates penetration tests across web apps and public APIs, with guidance down to a tech stack and code level.Ownership not established
- Cequence SecurityCequence Security sells a single platform that combines agentic AI governance, API security, bot defense and web app protection.Privately held · primary category
- Data TheoremData Theorem sells application security products that secure code, mobile apps, APIs and cloud.Ownership not established · primary category
- DataDomeDataDome sells bot protection for websites, mobile apps, APIs and MCP servers.Ownership not established
- EscapeEscape sells an offensive security platform that uses AI agents to discover, test and remediate vulnerabilities in engineering workflows.Privately held · primary category
- F5F5 sells the F5 Application Delivery and Security Platform (ADSP), which F5 describes as keeping applications and APIs fast, available, and secure across complex environments.Public (NASDAQ: FFIV)
- FastlyFastly is an edge cloud platform that helps companies deliver fast, secure, and reliable digital experiences.Public (NYSE: FSLY)
- ImpervaImperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users.Owned by Thales
- IndusfaceIndusface sells the AppTrana platform for web apps, APIs and AI workloads, and the Indusface WAS platform for DAST scanning and pen-testing.Ownership not established
- InvictiInvicti sells an application security platform that combines DAST, SAST, SCA, IaC, Secrets, and Container testing in one platform.Ownership not established
- Levo.aiLevo.ai sells a security platform for APIs and AI assets, covering discovery, visibility and protection for API driven systems.Ownership not established · primary category
- Protectt.aiProtectt.ai sells an AI-native, full-stack mobile app security platform for mobile apps, devices and transactions.Ownership not established
- PyntPynt sells a platform that discovers and secures APIs, LLMs and MCPs in one single solution.Ownership not established · primary category
- Salt SecuritySalt Security provides security for the APIs, MCP servers and data infrastructure where agents execute.Ownership not established · primary category
- StackHawkStackHawk sells two plans, Wingman and StackHawk Scale, that run on HawkScan, a runtime testing engine for running applications.Ownership not established
- StratoKeyStratoKey sells the CDP Platform, which encrypts or tokenizes sensitive data before it reaches SaaS applications or AI systems and secures it within API payloads.Ownership not established
- Sweet SecuritySweet Security agents learn how each application, agent and workload should behave.Privately held
- Terra SecurityTerra Platform™ covers web, API, AI, external network, and internal network pentesting.Ownership not established
- Traceable AITraceable offers continuous discovery and posture insights for APIs and MCP tools to identify and manage security risks across modern AI applications.Privately held · primary category
- UpwindUpwind sells security for cloud workloads, APIs and agents, combining their context with runtime intelligence to identify critical risks and catch new attacks in real time.Privately held
- WallarmWallarm is an AI security and API security platform that discovers AI workloads, monitors runtime behavior, enforces policy inline, and generates continuous compliance evidence.Privately held · primary category