Wallarm API Security

Wallarm API Security is an API protection platform that discovers APIs from live traffic and blocks attacks inline. It supports REST, GraphQL, gRPC, SOAP, and WebSocket, and does not require an API specification.

Discovery:

• Finds shadow, zombie, and rogue APIs
• Builds OpenAPI specs from live traffic
• Surfaces sensitive data in transit and maps it to compliance scope
• Covers the external attack surface

Protection:

• Blocks OWASP API Top 10 attacks, injections (SQLi, XSS, RCE), BOLA, broken authentication, SSRF, and 0-day exploits without signatures
• Blocking modes: single-request, session, and IP blocking, selected automatically from the attack pattern or set by policy

Abuse prevention:

• Detects credential stuffing, account takeover, malicious bots, scraping, and L7 DDoS by behavior
• Blocks at the session level rather than by IP

Leak management:

• Scans public sources for leaked API keys, tokens, and credentials tied to a customer's domains

Response:

• Provides request-level detail on malicious requests
• Active Threat Verification surfaces confirmed incidents
• Sends events to SIEM, ticketing, and alerting tools

The product is described as the API protection layer of Wallarm's AI Control Loop, alongside AI Hypervisor and Infrastructure Discovery. A 30-minute walkthrough on a live API Discovery dashboard is offered.