Application Security
Providers using this tag (84)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 1 Complete, well-documented, and agent-ready
Strong 6 Solid coverage with minor gaps
Developing 12 Usable, with meaningful gaps to close
Thin 18 Limited public surface area
Emerging 23 Early or largely undocumented
Minimal 21 Almost no public developer surface
Unrated 3 Not yet scored
APIs with this tag (12)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 2 Complete, well-documented, and agent-ready
Strong 1 Solid coverage with minor gaps
Developing 3 Usable, with meaningful gaps to close
Thin 3 Limited public surface area
Emerging 3 Early or largely undocumented
Companies reaching this through an API (3)
These companies publish an API, specification or operation carrying “Application Security” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Score breakdown
Related tags
Where this tag comes from
Markets provisional
Kin Score markets whose measured providers carry this tag. Share is the fraction of the market's measured providers that carry it — it describes the market, not this tag.
| Market | Share of the market's providers |
|---|---|
| Software Supply Chain (SBOM, Signing, Open Source Security) | 30% |
Cohort brief
Auto-generatedThe 74 providers in the APIs.io catalog tagged Application Security, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.
| Facet | This cohort | Catalog | Difference | Scored |
|---|---|---|---|---|
| Developer Ergonomics | 30.6 | 23.2 | +7.4 | 74 |
| Operational Transparency | 19.6 | 13 | +6.6 | 74 |
| Access Clarity | 29.7 | 23.9 | +5.8 | 74 |
| Discoverability | 62.2 | 57.9 | +4.3 | 74 |
| Contract Governance | 9 | 6.5 | +2.5 | 74 |
| Contract Quality | 18.8 | 17.2 | +1.6 | 74 |
A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.
| Artifact | This cohort | Catalog | Difference |
|---|---|---|---|
| MCP server (any) | 25% | 13% | +12 |
| MCP server (first-party) | 23% | 12% | +11 |
| Agent Skills | 0% | 0% | 0 |
| OAuth scopes | 6% | 11% | -5 |
| Security | 96% | 98% | -2 |
| Arazzo workflows | 1% | 2% | -1 |
| Governance rules | 18% | 16% | +2 |
mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.
- 1 Snyk 79.1
- 2 OpenText Cybersecurity 60.4
- 3 Contrast Security 58.6
- 4 Xbow 57.8
- 5 Fortify 57.4
- 6 Veracode 57.3
- 7 Checkmarx 57
- 8 Qwiet Ai 52.7
- 9 Pynt 51.2
- 10 Citrix NetScaler 50.9
- 1 Contrast Security 55.1
- 2 Snyk 45.7
- 3 DataDome 43.9
- 4 OpenText Cybersecurity 38.5
- 5 Checkmarx 33.7
- 6 Cequence Security 33.6
- 7 Qwiet Ai 32.9
- 8 Xbow 32.1
- 9 Appdome 30.1
- 10 Tidelift 30.1
Coverage caveat. 65 of 74 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 24 October 2026, across 31984 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.