API security
Discovery, testing and runtime protection of application programming interfaces.
13 vendors · alphabetical, never ranked
- 42Crunch42Crunch sells an API security platform that tests APIs against their contract before they reach production, protects them at runtime, and extends the same approach to the MCP servers that AI agents call and expose.Ownership not established · primary category
- A10 NetworksA10 Networks sells network and application security products defending against DDoS attacks and API abuse, along with infrastructure products for application delivery and load balancing.Public (NYSE: ATEN)
- AppdomeAppdome sells a platform that builds and maintains security, anti-fraud and bot-defense protections into Android and iOS applications, along with a mobile API protection product called MobileBOT Defense that verifies app, device and session identity.Ownership not established
- Cequence SecurityCequence Security sells a platform that protects applications, APIs and AI agents, combining API security, bot management and web application and API protection (WAAP).Privately held · primary category
- Data TheoremData Theorem sells a set of application security products covering API discovery and runtime protection, code testing (SAST, SCA and SBOM management), cloud-native application testing, and mobile app testing and runtime protection.Ownership not established · primary category
- EscapeEscape sells an offensive security platform that combines business-logic-aware dynamic application security testing, AI-driven penetration testing, and external network pentesting, originally built around API security.Privately held · primary category
- F5F5 sells the Application Delivery and Security Platform, which delivers and secures applications and APIs across on-premises, cloud and hybrid environments, along with a web application firewall.Public (NASDAQ: FFIV)
- ImpervaImperva sells web application firewall, bot management, API security and DDoS protection products, along with data security offerings, to protect applications and data on premises and in the cloud.Owned by Thales
- InvictiInvicti sells an application security platform built around dynamic testing of running web applications and APIs, extended with static analysis, open-source dependency scanning, infrastructure-as-code checks, and secrets detection.Ownership not established
- Levo.aiLevo.ai sells a runtime application security platform that discovers APIs, AI agents, MCP servers and LLMs, tests them offensively, and enforces inline protection against malicious traffic.Ownership not established · primary category
- Salt SecuritySalt Security sells an API security platform that discovers and protects APIs using machine learning, and has extended it into agentic AI security covering AI agents, MCP servers and the models and APIs they connect to.Ownership not established · primary category
- StackHawkStackHawk sells a dynamic application and API security testing platform that runs tests against an organization's running applications, integrating into coding-agent workflows to surface exploitable vulnerabilities and verify fixes before code merges.Ownership not established
- WallarmWallarm sells a platform that secures APIs, web applications and AI workloads, with products covering AI workload discovery and governance and inline API protection.Privately held · primary category
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.