niche · 0.5

API Security

Score 20.2 / 100 49 providers 24 APIs Search apis.io →
Variants seen in the corpus: API Securityapi-security

Providers using this tag (49)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
PostmanAI Agent BuilderAI AgentsAPI CatalogAPI Client21 APIs67.2
Strong 3 Solid coverage with minor gaps
CloudflareAI GatewayAPI GatewayArtificial IntelligenceCDN24 APIs63.4IBMAPI ManagementArtificial IntelligenceBillingCloud Computing1 API61.4UpwindSecurityCloud SecurityCNAPPVulnerability Management2 APIs54.6
Developing 10 Usable, with meaningful gaps to close
AuthleteCompanyAuthenticationOpenID ConnectAuthorization1 API48.9ApinizerAPI GatewayAPI ManagementAPI Monitoring1 API48.6CyCognitoCompanyCybersecurityAttack Surface ManagementExposure Management1 API45.9Upwind SecurityCompanyCybersecurityCloud SecurityCNAPP2 APIs43.9StackHawkApplication SecurityDASTSecurity Testing1 API43.8WallarmSecurity TestingWAFCybersecurity1 API42.7ImpervaSecurityCybersecurityWAFDDoS Protection2 APIs42.0Gray SwanCompanyArtificial IntelligenceAI SecurityLLM Security1 API41.5detectifyCompanySecurityCybersecurityAttack Surface Management1 API41.1CloudGuardCheck PointCNAPPCloud SecurityCompliance1 API39.8
Thin 16 Limited public surface area
Akamai API SecurityAPI DiscoveryCloud SecurityPosture Management1 API39.2PortSwiggerSecurityWeb SecurityPenetration TestingDAST5 APIs38.0Fortify SoftwareCompanySecurityApplication SecurityAppSec1 API37.4Aikido SecurityAI PentestingApplication SecurityCloud Security1 API36.9Cequence Securityapi-securityai-gatewayMCPagentic-ai1 API36.3TraceableAPI DiscoveryAPI ProtectionAPI Testing1 API35.1Chaitin TechSecurityWeb Application FirewallWAFCybersecurity6 APIs33.4RhapsodyHealthcareUnited StatesInteroperabilityIntegration Engine6 APIs31.3APIClarityAPI ObservabilityAPI Traffic AnalysisCisco1 API30.6APIs.io Engineering PlatformAPIs.ioEngineeringPlatform9 APIs30.3F5 Distributed Cloud ServicesApplication SecurityWeb Application FirewallMulti-Cloud Networking1 API30.1StyraCompanyCybersecurityAuthorizationPolicy as Code1 API30.142CrunchPlatformScanningSecurity6 APIs29.5PlainIDCompanyCybersecurityAuthorizationAccess Control1 API29.1AktoCompanySecurityAPI Security Testing26.5Orca SecurityAgentlessCIEMCloud Security2 APIs26.4
Emerging 14 Early or largely undocumented
ResurfaceAPI AnalyticsAPI ComplianceAPI LoggingAPI Observability5 APIs23.3Impart SecurityCompanySecurityRuntime Protection1 API22.6APIsecCompanyApplication SecurityAppSec21.0VorlonCompanySecuritySaaS SecurityAI Agents18.8APIwizAPI DesignAPI GatewayAPI GovernanceAPI Lifecycle1 API18.5API DynamicsAPI DiscoveryAPI ObservabilityZero Trust1 API17.9InvictiDASTSecurityVulnerability Scanning1 API16.8Cequence SecurityAI ProtectionAPI DiscoveryApplication Security5 APIs16.7OperantCompanySecurityAI Security16.7Salt SecurityArtificial IntelligenceAPI DiscoveryPosture Governance2 APIs13.8Noname SecurityAPI DiscoveryAPI TestingPosture Management4 APIs12.8API StackAPI DesignAPI DirectoryAPI GatewaysAPI Management1 API12.4Crosslayer LabsCompanySecurityNetwork SecurityWeb Infrastructure12.3Signal SciencesCompanySecurityWeb Application FirewallWAF1 API11.7
Minimal 5 Almost no public developer surface
RaspireCompanySecurityMobileApplication Security9.1Protectt AICompanyAi MlMobile App SecurityRASP8.8Hex SecurityCompanySecurityPenetration TestingApplication Security6.3Tcell IoCompanySecurityApplication Security5.0Tinfoil SecurityCompanySecurityApplication SecurityVulnerability Scanning4.4

APIs with this tag (24)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 1 Complete, well-documented, and agent-ready
Postman apiSecurity APIThe apiSecurity API from Postman — 1 operation(s) for apisecurity.67.2
Strong 3 Solid coverage with minor gaps
Cloudflare API Shield APICloudflare API Shield provides API discovery, schema validation, and security features to protect APIs from...63.4IBM API ConnectCreate, secure, manage, share, monetize, and analyze APIs across clouds with a comprehensive end-to-end API...61.4Upwind api-security APIThe api-security API from Upwind — 2 operation(s) for api-security.54.6
Developing 3 Usable, with meaningful gaps to close
Upwind Security api-security APIThe API Security resource offers methods for retrieving API catalog endpoints and their security information.43.9Imperva API SecurityAPI for managing Imperva's API security product, providing visibility into API traffic, detection of API vu...42.0CloudGuard WAF APICloudGuard WAF (CloudGuard AppSec) protects web applications and APIs with contextual machine-learning-base...39.8
Thin 8 Limited public surface area
Cequence AI GatewayEnterprise AI Gateway that makes applications agent-ready through governed Model Context Protocol integrati...36.3Traceable API Security PlatformTraceable provides an intelligent API security platform offering API discovery, threat detection and protec...35.1Rhapsody Guardian (Healthcare API Gateway)Rhapsody Guardian is a healthcare-purpose-built API gateway, launched October 2025, that lets healthcare or...31.3APIs.io Engineering Platform API Security APIThe **API Security** endpoints enable you to manage the [security of your API](https://learning.postman.com...30.3F5 Distributed Cloud Services APIComprehensive REST API for managing F5 Distributed Cloud Services including load balancers, WAF/WAAP polici...30.142Crunch API Protection42Crunch API Protection deploys an API-native micro firewall (API Firewall) that provides runtime defense a...29.542Crunch API Scan42Crunch API Scan performs dynamic API security testing (DAST) that evaluates runtime API behavior against ...29.542Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...29.5
Emerging 9 Early or largely undocumented
Resurface PlatformResurface captures complete API request and response data in real time, providing full-payload API call log...23.3Impart Security v0 REST APIImpart Security's v0 REST management API — programmatically manage specs, API/log bindings, connectors, cor...22.6APIwizAPIwiz is a low-code, end-to-end API management platform enabling the complete API lifecycle including desi...18.5API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...17.9Invicti APIThe Invicti API provides programmatic access to Invicti security scanning capabilities, including API Disco...16.8Salt Security API Protection PlatformThe Salt Security API Protection Platform provides full lifecycle API security including automated API disc...13.8Noname API Security PlatformThe Noname API Security Platform provides comprehensive API security through discovery, posture management,...12.8Noname Runtime ProtectionNoname Runtime Protection uses AI and machine learning to detect and block API attacks in real time, includ...12.8Signal Sciences Core APIThe Signal Sciences Core API (now the Fastly Next-Gen WAF control-plane API) is a REST API served at https:...11.7

Score breakdown

Frequency
50.4
log-scaled weighted occurrences
Breadth
1.3
spread across providers
Quality lift
36.3
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

DAST 11 co-occurrences API Discovery 9 co-occurrences Application Security 13 co-occurrences Web Application Firewall 6 co-occurrences WAF 6 co-occurrences CNAPP 5 co-occurrences Vulnerability Scanning 5 co-occurrences Cloud Security 9 co-occurrences

Where this tag comes from

Provider tag43
Api tag24
Openapi tag3
Openapi op tag5

Cohort brief

Auto-generated

The 49 providers in the APIs.io catalog tagged API Security, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
49
all scored
Mean Kin Score
30.1
+9.4 vs catalog 20.7
Mean Agent Readiness
16.2
+6.5 vs catalog 9.7
Spread
4.4–64.5
median 29.1 · σ 15.9
How the 49 split by band
Exemplar 0Strong 4Developing 11Thin 15Emerging 14Minimal 5
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Contract Quality 29.6 17.5 +12.1 49
Developer Ergonomics 29.1 17.9 +11.2 49
Operational Transparency 21 11.3 +9.7 49
Discoverability 68 60.4 +7.6 49
Access Clarity 29.2 22.3 +6.9 49
Contract Governance 11.7 6.4 +5.3 49

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 31% 16% +15
MCP server (first-party) 10% 7% +3
Agent Skills 0% 0% 0
OAuth scopes 8% 9% -1
Security 96% 88% +8
Arazzo workflows 6% 2% +4
Governance rules 29% 13% +16

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Postman 64.5
  2. 2 IBM 62.6
  3. 3 Cloudflare 62
  4. 4 Upwind 57
  5. 5 Authlete 52.1
  6. 6 Apinizer 49.2
  7. 7 CyCognito 47.7
  8. 8 Upwind Security 47
  9. 9 Gray Swan 44.6
  10. 10 StackHawk 44.4
Top by Agent Readiness
  1. 1 Upwind Security 52.9
  2. 2 Cloudflare 44.5
  3. 3 Upwind 43.7
  4. 4 IBM 39.4
  5. 5 CyCognito 38.7
  6. 6 APIs.io Engineering Platform 37.8
  7. 7 Postman 36.5
  8. 8 Gray Swan 29.3
  9. 9 Traceable 29
  10. 10 Authlete 28.2
All 49 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 25 August 2026, across 26891 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/api-security"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/api-security"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/api-security/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.