Checked October 2026.
Fastly API Security is a platform that provides visibility and protection for APIs across the Fastly Edge network. The product automatically discovers public-facing APIs and detects new, updated, and unintentional API calls within the edge infrastructure.
The platform addresses API security challenges including API discovery, lifecycle management, and abuse mitigation. It provides automated detection of API endpoints and maintains an inventory of the API landscape to help organizations understand what exists in their environment.
Key capabilities include integration with Fastly's Next-Gen WAF for identifying and mitigating vulnerable or unwanted API traffic through targeted rules and actions. The platform includes DDoS protection specifically designed to detect and stop API-focused attacks. Bot management functionality identifies and mitigates unwanted API calls from bots and crawlers.
The product offers edge rate limiting to control malicious and anomalous high-volume requests while allowing legitimate traffic. It provides GraphQL inspection capabilities through the Next-Gen WAF, enabling parsing of GraphQL requests for visibility and protection against GraphQL-specific attacks.
Fastly API Security aims to provide transparency across the API lifecycle and facilitate collaboration between platform and security teams through shared data sets and contextual information for decision making.
Sign in with a free account to see the full list.
Sign in with a free account to see the full list.
Sign in with a free account to see the full list.
Our take
Fastly customers protecting APIs on the edge.
It is on the list because discovery and blocking happen on the Fastly edge where your API traffic already flows, and it sends alerts to Slack, Jira, PagerDuty and Datadog. If your APIs are not behind Fastly, or most of your risk sits in internal and partner APIs, its edge view will see less of it, so weigh that first.
Reviewed by Nika (Nikoloz) Kokhreidze.
Common questions about Fastly API Security: features, pricing and alternatives.
Fastly API Security is a product by Fastly in the API Security category. It covers Attack Detection, Bot Protection and WAF.
Fastly API Security is a commercial product. For pricing, visit https://fastly.com/products/api-security/ or contact Fastly.
Alternatives to Fastly API Security listed on CybersecTools:
Compare all Fastly API Security alternatives at https://cybersectools.com/alternatives/fastly-api-security
Fastly API Security is available as cloud. It is listed for smb, mid-market and enterprise organizations. Pricing is commercial. Ask Fastly for pricing and support terms.
Side by side: features, pricing model and the company behind each one.
API data-in-motion protection using claims-based access and PoLP enforcement.
A brute-force protection middleware for express routes that rate-limits incoming requests.
A Node.js middleware module that automatically enforces HTTPS connections by redirecting HTTP requests to HTTPS URLs in Express.js applications.
Open-source libs for embedding API security controls directly in code.
FIPS 140-2 compliant API gateway and Axway API Gateway replacement.
API security & Zero Trust enforcement for Docker microservices.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,027 products.
Connect your AI
Updated 2026-11-02
See the shortlist
