API security

Flow-based anomaly detection+10

A10 Networks delivers secure, high-performance networking solutions that protect and scale critical applications across core, cloud, and edge environments

Akamai

Zero Trust / SASE / SSE

10 products

We make life better for billions of people, trillions of times a day

Zero Trust Network Access as a serviceDevice posture based adaptive access+10

AppSentinels Inc

Discover and inventory APIs+10

3 products

AppSentinels is a comprehensive API security platform that focuses on protecting the entire API lifecycle from development to runtime. It utilizes stateful API modeling and workflow analysis to identify sophisticated business logic attacks and data exfiltration that traditional WAFs often miss. The platform provides deep visibility into API discovery, vulnerability assessment, and real-time threat protection for REST, GraphQL, and AI-driven API endpoints.

AWS

Encryption & Key Management

16 products

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications. It is positioned for organizations that want key lifecycle control without running their own HSM fleet, and it uses FIPS 140-3 Level 3 validated HSMs under the service boundary. Buyers typically use it for envelope encryption, application signing, and server-side encryption across AWS services. It is best suited to teams standardizing key governance inside AWS rather than managing separate on-premises key systems.

Create and control KMS keys+10

Barracuda

Email Security

8 products

Barracuda is a leading cybersecurity company providing complete protection against complex threats

Cloud-based email gateway defense+10

Cequence Security

Complete API visibility and monitoring+10

Cequence Security sells API Security as part of its Unified API Protection platform, focusing on runtime discovery, inventory, compliance checks, and attack detection for internal, external, third-party, managed, unmanaged, shadow, and zombie APIs. It integrates with API gateways and reverse proxies to inspect live traffic and evaluate API usage and risk without adding client-side instrumentation. The product is best suited for enterprises that need continuous API attack-surface visibility and runtime protection across SaaS, on-premises, or hybrid environments. Cequence also offers adjacent bot management and WAAP capabilities, but its API Security scope centers on discovery, conformance, and blocking API abuse.

Checkmarx

Application Security (DAST/SAST)

Dynamic application security testing for web apps and APIs

Checkmarx One is an application security software platform built to help enterprises secure every stage of the SDLC while reducing engineering costs and accelerating development. As a leader in agentic application security testing, Checkmarx scans trillions of lines of code each year, helping organizations cut vulnerability density by more than half. Its autonomous security agents detect, prioritize, and counter AI-driven threats across legacy, modern, and AI-generated code at enterprise scale.

Check Point

Cloud Security / CSPM

Multi-cloud posture management+11

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide.

Curity

Identity & Access Management (IAM)

Flexible authentication methods+11

Curity was founded by identity specialists who had spent years working with identity and access management in large organizations. During that time, we saw a consistent challenge. Traditional IAM systems were designed for login portals and monolithic applications, while modern digital services were increasingly built on APIs, distributed systems and open identity standards. Organizations needed a different approach.

Data Theorem

Continuous API discoveryAPI health analysis+9

6 products

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Detectify

Attack Surface Management

6 products

Detectify is the application security platform that gives modern security teams ultimate control over their actual attack surface, delivering proprietary vulnerability data designed for both humans and agents.

Continuously monitor external attack surface+10

Equixly srl

No verifiable AI-SPM claims foundContinuous AI model inventory discovery+5

Continuous Offensive Security for APIs and Applications

F5 Advanced WAF

API endpoint discovery and inventoryGraphQL, REST, XML, and GWT protocol securityOWASP API Top 10 protection+9

We deliver and secure every app

Fastly

Firewall / NGFW

3 products

Developers change the way the world experiences the web: they drive the next groundbreaking innovation, power the companies that connect us, and create experiences that can transform our lives. And we built Fastly to make sure they always have what they need to make it happen.

Automatic DDoS detection and mitigation+10

FireTail

AI Security Posture (AI-SPM)

3 products

One platform to discover, assess, and protect all AI usage across your organization. FireTail gives you complete coverage across every employee, browser, device, application, and agent. Get the visibility, security and control you need to enable AI innovation at scale.

Continuous AI Discovery and Inventory+8

Imperva API Security

Continuously discover all APIs+11

Together, we provide innovative platforms designed to reduce the complexity and risks of managing and protecting more applications, data, and identities than any other company can.

KONG

Authorization and access control+11

Kong enables the connectivity layer for the agentic era – securely connecting, governing, and monetizing APIs and AI tokens across any model or cloud.

Mend.io

Application Security (DAST/SAST)

AI-generated code scanning in repository and IDE+9

Mend.io is the security platform built for every risk, across application security and AI security, securing the code layer, the AI layer, and the attack surface between them. Continuous protection across the full AI application lifecycle.

Noname Security

API discovery and inventory+11

Noname Security is an API security platform now operated by Akamai after the June 2024 acquisition. In scope for API security, it focuses on discovering and inventorying APIs, assessing posture, and detecting runtime abuse across REST, GraphQL, SOAP, XML-RPC, JSON-RPC, and gRPC. It is best suited for organizations with large, mixed API estates that need visibility into shadow or unmanaged APIs and policy enforcement without relying only on an API gateway.

Radware AppWall

Applies positive security model enforcement to API traffic, allowing only known-good request patterns and blocking anomalous calls that do not match the learned schema or policy.

Radware AppWall is Radware’s web application and API protection offering, positioned around positive security policy enforcement for HTTP-based services. In the API security scope, it protects REST, GraphQL, and SOAP endpoints with auto-generated policies, request validation, and attack blocking for abuse, injection, authentication bypass, and data theft attempts. It is best suited for enterprises that already use Radware application delivery infrastructure or need API protection tied to WAF policy enforcement rather than a standalone API gateway. The product is also used in environments with PCI-driven web application security requirements.

Salt Security

Enrich API intelligenceDetect API attackers earlyProactive API posture improvement+3

The world leader in Agentic Security

Sqreen (DataDog)

Runtime application protection in the application code

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale.

Sweet Security

Container Security / CNAPP

Real-time posture change monitoring+9

Sweet Security is redefining enterprise cloud protection. As the leading provider of Runtime CNAPP and AI Security solutions, Sweet unifies runtime context with advanced AI intelligence to protect the modern enterprise.

Traceable AI

Automatic API discovery and inventoryAPI security posture management+10

Secure modern applications by protecting the APIs, services, and data that power them.

Tyk

Authentication and authorization enforcement+11

5 products

Tyk is an open-source API gateway and API management platform that, in the API Security scope, provides request authentication, authorization, traffic controls, and policy enforcement for REST, GraphQL, gRPC, TCP, and SOAP APIs. It is best suited to teams that want to secure and govern APIs at the gateway layer while using a self-managed or cloud deployment model. Tyk also includes adjacent API management components such as analytics and a developer portal, but its security value is centered on controlling access, transport security, and request filtering at the edge.

Wallarm

Validate API traffic against schemas+11

1 product

Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand.

WSO2 API Manager

OAuth2 API access control+11

WSO2 API Manager is an open-source API management platform that, in the API Security category, centers on gateway-enforced authentication, authorization, throttling, threat protection, and traffic mediation for HTTP APIs and, in newer releases, GraphQL and asynchronous APIs. It is aimed at enterprises that need policy-driven control over exposed APIs across cloud, hybrid, and on-prem deployments. WSO2 also positions it as part of a broader API management stack, but its security value here is the gateway and policy enforcement layer rather than endpoint scanning or runtime app protection.

YazamTech

Email Security