Data Theorem API Security is a platform that provides API discovery, security testing, and runtime protection capabilities. The product operates across multi-cloud and on-premise environments to identify and secure APIs. The API discovery component uses multiple methods including blackbox discovery without agents, cloud discovery across AWS, Azure, GCP and private cloud environments, consolidation from existing API gateway solutions, and integration with developer tools. The platform maintains an inventory of discovered APIs. The security testing functionality incorporates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), customized testing, and hacker toolkits. The analyzer engine continuously scans for vulnerabilities and provides alerts with remediation guidance. The API Protect component provides runtime protection covering authentication, authorization, encryption, attack prevention, malicious site and domain blocking, bot protection, and API management. This component takes proactive measures to defend APIs during operation. The platform is designed to operate continuously without requiring agents or extensive configuration. It provides real-time monitoring and protection across cloud-native applications and APIs in hybrid environments.