Security is one of the API Evangelist areas on the APIs.io network — a focused corner of the API landscape. The full area lives at security.apievangelist.com.
30 providers on the network work in this area, including Amazon Web Services (AWS), Elastic Stack (ELK Stack), Amazon VPN, Mailboxlayer, Paubox, Snyk, and 24 more — each links out to that provider’s APIs, schemas, and governance artifacts.
Related areas: Authentication, Encryption, API Evangelist Search, and Containers. Browse every area at areas.apis.io.
About this area
An index and topic collection covering API security, identity, access management, secrets management, encryption, and threat protection. API security spans the full lifecycle of…
Related providers (825)
Top 30 of 825 network providers tagged for this area — search the full set on apis.io.
| Provider | Description | APIs | Rating |
|---|---|---|---|
| Amazon Web Services (AWS) | Amazon Web Services is the cloud computing arm of Amazon and the largest public cloud provider in the world, offering more than 200 services across compute, storage, databases, ... | 1 | exemplar |
| Elastic Stack (ELK Stack) | The Elastic Stack (formerly known as the ELK Stack) is the collection of open-source products from Elastic — Elasticsearch, Logstash, Kibana, and Beats/Elastic Agent — designed ... | 3 | exemplar |
| Amazon VPN | AWS VPN solutions establish secure connections between on-premises networks, remote offices, client devices, and the AWS global network. AWS offers two types of private connecti... | 1 | exemplar |
| Mailboxlayer | Real-time email validation and verification REST/JSON API operated by APILayer. Provides syntax checks, typo suggestions, MX-record lookup, SMTP verification, catch-all/role/dis... | 2 | exemplar |
| Paubox | Paubox is a HIPAA compliant, HITRUST certified email infrastructure company serving healthcare organizations in the United States. Its products encrypt outbound email without re... | 3 | exemplar |
| Snyk | Snyk is a developer-first security platform covering code, open-source dependencies, container images, and infrastructure-as-code. The Snyk REST API and V1 API expose groups, or... | 1 | exemplar |
| OneTrust | OneTrust is an enterprise trust, privacy, and AI-governance platform. Its developer portal publishes 37 downloadable OpenAPI definitions covering roughly 631 operations across U... | 37 | exemplar |
| Shodan | Shodan is the world's first search engine for Internet-connected devices. It continuously crawls the public Internet to build a searchable database of servers, IoT devices, indu... | 5 | exemplar |
| Clerk | Clerk is a complete user management and authentication infrastructure platform offering embeddable UI components, flexible APIs, and admin dashboards. It provides full-stack aut... | 3 | strong |
| Strivacity | Strivacity is a customer identity and access management (CIAM) vendor that runs a single-tenant, dedicated-cloud identity platform for consumer, partner, B2B and — since its Age... | 6 | strong |
| Cisco Identity Services Engine | Cisco Identity Services Engine (ISE) is Cisco's network access control and zero-trust policy platform: 802.1X and RADIUS authentication, TACACS+ device administration, guest and... | 104 | strong |
| Drata | Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata e... | 3 | strong |
| Censys | Censys is an internet intelligence and attack surface management platform that continuously scans the public IPv4 space, IPv6 announced ranges, and the global certificate transp... | 2 | strong |
| Barndoor | Barndoor AI is the control plane for agentic AI, providing secure access and governance for AI agents and Model Context Protocol (MCP) servers. Founded in 2024 by Oren Michels (... | 1 | strong |
| Cloudflare | Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable. | 24 | strong |
| ShieldLabs | Anonymous visitor identification and fraud-prevention platform. A browser ES-module snippet loaded from cdn.shieldlabs.ai collects 100+ device and network signals and returns si... | 1 | strong |
| F5 | F5 is a global company that specializes in application delivery and security solutions for businesses. They provide products and services that help organizations efficiently and... | 5 | strong |
| imgauth — API di attestazione opere digitali | Digital-work attestation and proof-of-existence service operated by Spazio Genesi ETS, an Italian non-profit (third-sector entity). The client computes a SHA-256 fingerprint loc... | 1 | strong |
| Very Good Security | Very Good Security (VGS) is a data security and payments infrastructure company that lets organizations operate on sensitive data — payment card numbers, bank accounts, PII, and... | 1 | strong |
| anecdotes | anecdotes is an enterprise Governance, Risk and Compliance (GRC) platform, founded in 2020 and headquartered in Tel Aviv, that pairs a GRC data engine with AI agents to replace ... | 3 | strong |
| Cisco XDR | Cisco XDR is Cisco's extended detection and response platform, the successor to SecureX. It correlates telemetry from Cisco Secure Endpoint, Secure Firewall, Umbrella, Duo, Secu... | 12 | strong |
| Fastly | Fastly is an edge cloud platform that helps customers create great digital experiences quickly, securely, and reliably by processing, serving, and securing their applications cl... | 22 | strong |
| Amazon Secrets Manager | Amazon Secrets Manager helps you manage, retrieve, and rotate database credentials, API keys, and other secrets throughout their lifecycle. It provides centralized secrets manag... | 1 | strong |
| Evervault | Evervault is a data-security and payments-infrastructure platform that lets developers encrypt, tokenize, and process sensitive data - especially cardholder data - without it to... | 1 | strong |
| OpenZeppelin | OpenZeppelin is a Web3 security platform providing tools for secure smart contract development, deployment, monitoring, and automation. The platform includes OpenZeppelin Contra... | 1 | strong |
| Amazon KMS | AWS Key Management Service (KMS) is a managed service that makes it easy to create and control the cryptographic keys used to protect your data, integrated with other AWS servic... | 1 | strong |
| Exclaimer | Exclaimer is an email signature management platform used by IT, marketing, and sales teams to centrally create, deploy, and govern corporate email signatures across Microsoft 36... | 10 | strong |
| Auth0 | Auth0 (now part of Okta) is a leading identity-as-a-service platform providing authentication and authorization for applications, APIs, and AI agents. It implements OpenID Conne... | 3 | strong |
| JFrog | JFrog provides universal DevOps solutions for software supply chain automation and security, offering a unified platform for managing binaries, securing the software supply chai... | 14 | strong |
| Azure Key Vault | Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It helps safeguard cryptographic keys and secrets used by cloud applicatio... | 1 | strong |
Related areas
Authentication (3 shared)
Encryption (3 shared)
API Evangelist Search (2 shared)
Containers (2 shared)
DNS (2 shared)
Logging (2 shared)
Cohort brief
Auto-generatedThe 30 providers in the APIs.io catalog working in Security, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.
Providers
30
all scored
Mean Kin Score
65.6
+41.8 vs catalog 23.8
Mean Agent Readiness
36.4
+24.8 vs catalog 11.6
Spread
60.4–78.2
median 64.7 · σ 4.7
How the 30 split by band
Exemplar 8Strong 22Developing 0Thin 0Emerging 0Minimal 0
Facet averages, against the whole catalog
| Facet | This cohort | Catalog | Difference | Scored |
|---|---|---|---|---|
| Developer Ergonomics | 72.4 | 23.3 | +49.1 | 30 |
| Access Clarity | 73.7 | 26.3 | +47.4 | 30 |
| Contract Quality | 66.6 | 19.8 | +46.8 | 30 |
| Operational Transparency | 59.6 | 13.9 | +45.7 | 30 |
| Contract Governance | 21.3 | 6.3 | +15 | 30 |
| Discoverability | 73.3 | 61 | +12.3 | 30 |
A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.
What this cohort publishes
| Artifact | This cohort | Catalog | Difference |
|---|---|---|---|
| MCP server (any) | 50% | 10% | +40 |
| MCP server (first-party) | 40% | 9% | +31 |
| Agent Skills | 0% | 0% | 0 |
| OAuth scopes | 27% | 11% | +16 |
| Security | 100% | 97% | +3 |
| Arazzo workflows | 23% | 2% | +21 |
| Governance rules | 50% | 14% | +36 |
mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.
Top by Kin Score
- 1 Amazon Web Services (AWS) 78.2
- 2 Elastic Stack (ELK Stack) 76.7
- 3 Amazon VPN 73.3
- 4 Mailboxlayer 71.9
- 5 Paubox 71.5
- 6 Snyk 71.3
- 7 OneTrust 68.2
- 8 Shodan 67.2
- 9 Clerk 65.8
- 10 Strivacity 65.7
Top by Agent Readiness
- 1 Paubox 56.3
- 2 OneTrust 52.9
- 3 Elastic Stack (ELK Stack) 50.3
- 4 F5 48.7
- 5 Drata 48.6
- 6 Cloudflare 44.5
- 7 Snyk 43.7
- 8 ShieldLabs 42.1
- 9 Very Good Security 42.1
- 10 Amazon Web Services (AWS) 38.5
All 30 members of this roster resolve to a scored provider in
the catalog.Generated from the catalog build of
9 September 2026, across 27528
providers, using the same computation served by the
APIs.io cohort API. Briefs are published for rosters of
5 or more scored providers; below that a distribution is not meaningful.
Work with this as data
Every area here is available over the APIs.io API and to AI agents over MCP.