WAF and WAAP
Web application firewalls and web application and API protection services that filter malicious requests to web properties.
14 vendors · alphabetical
- AkamaiAkamai sells cloud computing, security and content delivery products.Ownership not established · primary category
- Barracuda NetworksBarracuda Networks sells the BarracudaONE cybersecurity platform, which covers email, data, applications and networks and is strengthened by a 24/7 managed XDR service.Owned by KKR since 2022
- BlackwallBlackwall sells a web traffic management platform for the hosting market.Privately held
- Cequence SecurityCequence Security sells a single platform that combines agentic AI governance, API security, bot defense and web app protection.Privately held
- CloudflareCloudflare sells one platform for apps, agents and workforce.Public (NYSE: NET)
- F5F5 sells the F5 Application Delivery and Security Platform (ADSP), which F5 describes as keeping applications and APIs fast, available, and secure across complex environments.Public (NASDAQ: FFIV) · primary category
- FastlyFastly is an edge cloud platform that helps companies deliver fast, secure, and reliable digital experiences.Public (NYSE: FSLY) · primary category
- ImpervaImperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users.Owned by Thales · primary category
- IndusfaceIndusface sells the AppTrana platform for web apps, APIs and AI workloads, and the Indusface WAS platform for DAST scanning and pen-testing.Ownership not established · primary category
- IONIXIONIX sells an External Exposure Management platform designed to discover, validate, and remediate external exposures across the full organizational footprint.Ownership not established
- MiggoMiggo is an Application Detection and Response (ADR) platform that shows which vulnerabilities are exploitable in running banking applications and shields them at runtime while the patch waits.Ownership not established
- SafeLineSafeLine sells a web application firewall that protects websites from attacks such as SQL injections, cross-site scripting and zero-day exploits, using a semantic analysis engine that looks at traffic behavior and context rather than relying only on known signatures.Ownership not established · primary category
- Traceable AITraceable offers continuous discovery and posture insights for APIs and MCP tools to identify and manage security risks across modern AI applications.Privately held
- WallarmWallarm is an AI security and API security platform that discovers AI workloads, monitors runtime behavior, enforces policy inline, and generates continuous compliance evidence.Privately held