Feature

DDoS & Abuse Protection

Traffic filtering, WAF, and bot mitigation.

15 providers 212 APIs 14 declared variants

The platform absorbs volumetric attacks and filters abusive traffic with WAF rules and bot detection. Keeps the API available when someone is actively trying to take it down.

15 API providers on the APIs.io network offer ddos & abuse protection. The highest-rated are Fastly, Amazon API Gateway, Cloudflare, Okta, F5 Networks.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
Fastly Fastly is an edge cloud platform that helps customers create great digital experiences quickly, securely, a... 23 APIs 70.2
Strong 3 Solid coverage with minor gaps
Amazon API Gateway Amazon API Gateway is a fully managed service that makes it easy to create, publish, maintain, monitor, and... 4 APIs 69.9 Cloudflare Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fas... 54 APIs 69.7 Okta Okta is the workforce identity incumbent — its Identity Cloud platform (also called the Okta Workforce Iden... 3 APIs 66.6
Developing 5 Usable, with meaningful gaps to close
F5 Networks F5 Networks is a leader in application delivery networking technology that specializes in application avail... 11 APIs 59.5 Filevine Filevine is the leading legal case management and operating intelligence platform for plaintiff, personal-i... 9 APIs 59.5 Citrix NetScaler Citrix NetScaler is an application delivery controller (ADC) that provides load balancing, traffic manageme... 4 APIs 59.3 Amazon CloudFront Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, app... 1 API 55.8 Akamai Akamai is a global content delivery network (CDN), cloud services, and cybersecurity company that helps org... 77 APIs 51.2
Thin 1 Limited public surface area
Riskified Riskified (NYSE RSKD) is an Israeli ecommerce risk-management platform that uses machine learning and a glo... 7 APIs 34.0
Emerging 5 Early or largely undocumented
Amkor Technology Amkor Technology is the world's largest US-based provider of outsourced semiconductor packaging and test se... 1 API 28.1 Abnormal Security Abnormal Security (operating under the abnormal.ai brand) is an AI-native email and SaaS security platform ... 1 API 27.5 Signifyd Signifyd is an ecommerce fraud prevention, chargeback protection, and revenue optimization platform. Its Co... 8 APIs 26.2 Sardine Sardine is a San Francisco-based fraud prevention, AML compliance, and risk management platform for fintech... 6 APIs 22.1 Kount Kount is a Boise, Idaho-based fraud prevention and chargeback management platform, now operating as part of... 3 APIs 19.0

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

AES-256 at rest, TLS 1.2/1.3 in transit, 2FA, RBAC, WAF, DDoS protection, public bug bountyAWS WAF IntegrationAccount Takeover ProtectionBot Detection, Account Takeover Protection, Policy Abuse Prevention, Refund Fraud DetectionDDoS ProtectionNext-Gen WAF (Signal Sciences) with workspaces, signals, virtual patchesPolicy Protect — refund and return abuse prevention with claim adjudication via claim_create / claim_decision / claim_updatePro at $25/zone/mo with WAF and image optimizationProfessional: Device Access, ISPM, Identity Threat Protection, Sandbox, Unlimited Workflows (custom pricing)Returns API powering Return Insights, Return Abuse Prevention, and Instant RefundsService: Akamai App & API Protector (WAF + DDoS + Bot)Wafer-Level PackagingWeb Application FirewallWeb Application Firewall for application security

Scroll for all 14