niche · 0.6 capability action

API Security

Score 19.9 / 100 47 providers +6 via APIs 23 APIs Search apis.io →

Providers using this tag (46)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 4 Solid coverage with minor gaps
RoutebaseAPI lifecycle managementAPI DesignOpenAPIAPI Documentation1 API66.1AuthleteCompanyAuthenticationOpenID ConnectAuthorization1 API60.7detectifyCompanySecurityCybersecurityAttack Surface Management1 API58.0UpwindSecurityCloud SecurityCNAPPVulnerability Management2 APIs56.5
Developing 8 Usable, with meaningful gaps to close
PyntAPI TestingSecurityApplication Security2 APIs50.4StackHawkApplication SecurityDASTSecurity Testing1 API49.7Akamai API SecurityAPI DiscoveryCloud SecurityPosture Management1 API40.3WallarmSecurity TestingWAFCybersecurity1 API39.3CyCognitoCompanyCybersecurityAttack Surface ManagementExposure Management1 API51.3ApinizerAPI GatewayAPI ManagementAPI Monitoring1 API50.8Cequence SecurityAI ProtectionAPI DiscoveryApplication Security6 APIs44.5Gray SwanCompanyArtificial IntelligenceAI SecurityLLM Security1 API44.5
Thin 16 Limited public surface area
Aikido SecurityAI PentestingApplication SecurityCloud Security1 API37.2APIClarityAPI ObservabilityAPI Traffic AnalysisCisco12 APIs35.4ApyguardCompanyDeveloper ToolsSoftware-as-a-Service1 API34.0TraceableAPI DiscoveryAPI ProtectionAPI Testing1 API34.042CrunchPlatformScanningSecurity6 APIs30.0AktoCompanySecurityAPI Security Testing29.8ResurfaceAPI AnalyticsAPI ComplianceAPI LoggingAPI Observability5 APIs27.7Impart SecurityCompanySecurityRuntime Protection1 API26.4Chaitin TechSecurityWeb Application FirewallWAFCybersecurity6 APIs35.1F5 Distributed Cloud ServicesApplication SecurityWeb Application FirewallMulti-Cloud Networking1 API34.7ImpervaSecurityCybersecurityWAFDDoS Protection2 APIs34.0StyraCompanyCybersecurityAuthorizationPolicy as Code1 API29.3CurityCompanyIdentityAuthenticationOpenID Connect4 APIs28.6PlainIDCompanyCybersecurityAuthorizationAccess Control1 API27.9APIPostureCompanyComplianceAutomation15 APIs27.2APIwizAPI DesignAPI GatewayAPI GovernanceAPI Lifecycle1 API26.5
Emerging 14 Early or largely undocumented
API DynamicsAPI DiscoveryAPI ObservabilityZero Trust1 API21.4PortSwiggerSecurityWeb SecurityPenetration TestingDAST5 APIs20.4InvictiDASTSecurityVulnerability Scanning1 API17.0Noname SecurityAPI DiscoveryAPI TestingDeveloper Tools4 APIs15.6Salt SecurityArtificial IntelligenceAPI DiscoveryPosture Governance2 APIs15.6Data TheoremCompanyApplication SecurityCloud Security2 APIs13.7Orca SecurityAgentlessCIEMCloud Security2 APIs20.3APIsecCompanyApplication SecurityAppSec19.5VorlonCompanySecuritySaaS SecurityAI Agents19.1OperantCompanySecurityAI Security18.2Signal SciencesCompanySecurityWeb Application FirewallWAF1 API14.4API StackAPI DesignAPI DirectoryAPI GatewaysAPI Management1 API12.6Crosslayer LabsCompanySecurityNetwork SecurityWeb Infrastructure11.9RaspireCompanySecurityMobileApplication Security11.7
Minimal 3 Almost no public developer surface
Tinfoil SecurityCompanySecurityApplication SecurityVulnerability Scanning2.0Protectt AICompanyArtificial IntelligenceMobile App SecurityRASP9.0Hex SecurityCompanySecurityPenetration TestingApplication Security6.0
Unrated 1 Not yet scored
Tcell IoCompanySecurityApplication Security

APIs with this tag (22)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 3 Complete, well-documented, and agent-ready
Postman API Security APIThe API Security API from Postman — 1 operation(s) for api security.77.9Cloudflare API Shield APICloudflare API Shield provides API discovery, schema validation, and security features to protect APIs from...75.6IBM API ConnectCreate, secure, manage, share, monetize, and analyze APIs across clouds with a comprehensive end-to-end API...67.6
Strong 1 Solid coverage with minor gaps
Upwind API Security APIThe api-security API from Upwind — 2 operation(s) for api-security.56.5
Developing 2 Usable, with meaningful gaps to close
CloudGuard WAF APICloudGuard WAF (formerly CloudGuard AppSec) protects web applications and APIs with contextual machine-lear...47.8Cequence AI GatewayEnterprise AI Gateway that makes applications agent-ready through governed Model Context Protocol integrati...44.5
Thin 10 Limited public surface area
F5 Distributed Cloud Services APIComprehensive REST API for managing F5 Distributed Cloud Services including load balancers, WAF/WAAP polici...34.7Imperva API SecurityAPI for managing Imperva's API security product, providing visibility into API traffic, detection of API vu...34.0Traceable API Security PlatformTraceable provides an intelligent API security platform offering API discovery, threat detection and protec...34.0Rhapsody Guardian (Healthcare API Gateway)Rhapsody Guardian is a healthcare-purpose-built API gateway, launched October 2025, that lets healthcare or...31.642Crunch API Protection42Crunch API Protection deploys an API-native micro firewall (API Firewall) that provides runtime defense a...30.042Crunch API Scan42Crunch API Scan performs dynamic API security testing (DAST) that evaluates runtime API behavior against ...30.042Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...30.0Resurface PlatformResurface captures complete API request and response data in real time, providing full-payload API call log...27.7APIwizAPIwiz is a low-code, end-to-end API management platform enabling the complete API lifecycle including desi...26.5Impart Security v0 REST APIImpart Security's v0 REST management API — programmatically manage specs, API/log bindings, connectors, cor...26.4
Emerging 6 Early or largely undocumented
API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...21.4Invicti APIThe Invicti API provides programmatic access to Invicti security scanning capabilities, including API Disco...17.0Noname API Security PlatformThe Noname API Security Platform provides comprehensive API security through discovery, posture management,...15.6Noname Runtime ProtectionNoname Runtime Protection uses AI and machine learning to detect and block API attacks in real time, includ...15.6Salt Security API Protection PlatformThe Salt Security API Protection Platform provides full lifecycle API security including automated API disc...15.6Signal Sciences Core APIThe Signal Sciences Core API (now the Fastly Next-Gen WAF control-plane API) is a REST API served at https:...14.4

Companies reaching this through an API (6)

These companies publish an API, specification or operation carrying “API Security” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

APIs.io Engineering Platform Cloudflare CloudGuard IBM Postman Rhapsody

Score breakdown

Frequency
49.6
log-scaled weighted occurrences
Breadth
1.1
spread across providers
Quality lift
30.8
mean composite of providers using it
Cohesion
7.0
strength of nearest seed neighbor

Related tags

DAST 11 co-occurrences API Discovery 9 co-occurrences Application Security 14 co-occurrences Web Application Firewall 6 co-occurrences WAF 6 co-occurrences API Monitoring 5 co-occurrences Vulnerability Scanning 5 co-occurrences API Testing 6 co-occurrences

Where this tag comes from

Provider tag47
Api tag23
Openapi tag1
Openapi op tag1

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/api-security"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/api-security"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/api-security/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.