API Security
Providers using this tag (43)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Strong 1 Solid coverage with minor gaps
Developing 11 Usable, with meaningful gaps to close
Thin 12 Limited public surface area
Emerging 13 Early or largely undocumented
Minimal 5 Almost no public developer surface
Unrated 1 Not yet scored
APIs with this tag (22)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 3 Complete, well-documented, and agent-ready
Cloudflare API Shield APICloudflare API Shield provides API discovery, schema validation, and security features to protect APIs from...Postman API Security APIThe API Security API from Postman — 1 operation(s) for api security.IBM API ConnectCreate, secure, manage, share, monetize, and analyze APIs across clouds with a comprehensive end-to-end API...
Developing 4 Usable, with meaningful gaps to close
CloudGuard WAF APICloudGuard WAF (formerly CloudGuard AppSec) protects web applications and APIs with contextual machine-lear...Upwind API Security APIThe api-security API from Upwind — 2 operation(s) for api-security.Cequence AI GatewayEnterprise AI Gateway that makes applications agent-ready through governed Model Context Protocol integrati...Imperva API SecurityAPI for managing Imperva's API security product, providing visibility into API traffic, detection of API vu...
Thin 6 Limited public surface area
Traceable API Security PlatformTraceable provides an intelligent API security platform offering API discovery, threat detection and protec...Rhapsody Guardian (Healthcare API Gateway)Rhapsody Guardian is a healthcare-purpose-built API gateway, launched October 2025, that lets healthcare or...F5 Distributed Cloud Services APIComprehensive REST API for managing F5 Distributed Cloud Services including load balancers, WAF/WAAP polici...42Crunch API Protection42Crunch API Protection deploys an API-native micro firewall (API Firewall) that provides runtime defense a...42Crunch API Scan42Crunch API Scan performs dynamic API security testing (DAST) that evaluates runtime API behavior against ...42Crunch API Security AuditThe 42Crunch API Security Audit performs automated static analysis of API definitions (OpenAPI 2, 3.0, 3.1 ...
Emerging 8 Early or largely undocumented
APIwizAPIwiz is a low-code, end-to-end API management platform enabling the complete API lifecycle including desi...Impart Security v0 REST APIImpart Security's v0 REST management API — programmatically manage specs, API/log bindings, connectors, cor...API Dynamics PlatformThe APIDynamics platform provides AI-driven API security and observability including API discovery, traffic...Resurface PlatformResurface captures complete API request and response data in real time, providing full-payload API call log...Invicti APIThe Invicti API provides programmatic access to Invicti security scanning capabilities, including API Disco...Salt Security API Protection PlatformThe Salt Security API Protection Platform provides full lifecycle API security including automated API disc...Noname API Security PlatformThe Noname API Security Platform provides comprehensive API security through discovery, posture management,...Noname Runtime ProtectionNoname Runtime Protection uses AI and machine learning to detect and block API attacks in real time, includ...
Minimal 1 Almost no public developer surface
Companies reaching this through an API (6)
These companies publish an API, specification or operation carrying “API Security” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Score breakdown
Frequency
49.6
log-scaled weighted occurrences
Breadth
1.1
spread across providers
Quality lift
35.6
mean composite of providers using it
Cohesion
8.4
strength of nearest seed neighbor
Related tags
DAST 11 co-occurrences
API Discovery 10 co-occurrences
Application Security 14 co-occurrences
Web Application Firewall 6 co-occurrences
WAF 6 co-occurrences
API Testing 7 co-occurrences
Vulnerability Scanning 5 co-occurrences
Cloud Security 9 co-occurrences
Where this tag comes from
Provider tag44
Api tag22
Openapi tag2
Openapi op tag1
Cohort brief
Auto-generatedThe 42 providers in the APIs.io catalog tagged API Security, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.
Providers
42
of 44 in the catalog
Mean Kin Score
29.6
+6.7 vs catalog 22.9
Mean Agent Readiness
16.3
+4.4 vs catalog 11.9
Spread
4.6–64.3
median 28.2 · σ 14.5
How the 42 split by band
Exemplar 0Strong 1Developing 12Thin 11Emerging 14Minimal 4
Facet averages, against the whole catalog
| Facet | This cohort | Catalog | Difference | Scored |
|---|---|---|---|---|
| Developer Ergonomics | 32.3 | 23.2 | +9.1 | 42 |
| Contract Quality | 24.4 | 17.6 | +6.8 | 42 |
| Operational Transparency | 19.4 | 13.7 | +5.7 | 42 |
| Discoverability | 63.6 | 58.1 | +5.5 | 42 |
| Contract Governance | 11.1 | 6.3 | +4.8 | 42 |
| Access Clarity | 31.2 | 26.5 | +4.7 | 42 |
A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.
What this cohort publishes
| Artifact | This cohort | Catalog | Difference |
|---|---|---|---|
| MCP server (any) | 16% | 14% | +2 |
| MCP server (first-party) | 12% | 12% | 0 |
| Agent Skills | 0% | 0% | 0 |
| OAuth scopes | 9% | 11% | -2 |
| Security | 98% | 98% | 0 |
| Arazzo workflows | 0% | 2% | -2 |
| Governance rules | 23% | 14% | +9 |
mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.
Top by Kin Score
- 1 Routebase 64.3
- 2 ChannelSeal 52.8
- 3 Pynt 52.7
- 4 Upwind 52
- 5 Authlete 48.8
- 6 Apinizer 47.4
- 7 CyCognito 46.5
- 8 Cequence Security 42.7
- 9 StackHawk 42.6
- 10 Gray Swan 41.8
Top by Agent Readiness
- 1 Routebase 52.9
- 2 Upwind 41.5
- 3 ChannelSeal 39.9
- 4 CyCognito 38.7
- 5 Cequence Security 33.6
- 6 APIClarity 32.5
- 7 Authlete 30.4
- 8 Traceable 28.6
- 9 42Crunch 28.1
- 10 Akamai API Security 27.3
All 44 members of this roster resolve to a provider in the
catalog; 42 carry a score (95%).
The figures above describe the scored members only.
Coverage caveat. 33 of 42 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 5 October 2026, across 29093 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Coverage caveat. 33 of 42 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 5 October 2026, across 29093 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.