Sign in Book a Demo

Application and API Security

Secure your applications and APIs from threats. Protect your data and users with robust security solutions.

Tools per subcategory

Software Development Lifecycle (SDLC) Security 313
API Security 51
Web Application Firewalls (WAF) 41
Container Security 11

API Security

View all API Security tools →
Free
API Security

Wallarm

Wallarm delivers a unified, best-in-class API Security and Web Application and API Protection (WAAP) platform designed to safeguard your entire API and web application portfolio from development through runtime. Our automated solution seamlessly integrates with any platform, cloud environment (including multi-cloud, cloud-native, hybrid, and on-premise), empowering organizations to discover APIs, identify vulnerabilities, detect sophisticated threats, and eliminate attacks to significantly enhance business resilience and security posture.

Comprehensive API Discovery and InventoryAutomated API Vulnerability DetectionReal-time Threat Detection and Prevention
Free
API Security

SplxAI

SplxAI provides advanced security and pentesting solutions specifically designed to secure GenAI-powered conversational applications. Recognizing that traditional security measures are insufficient for the unique complexities of AI, SplxAI offers a proactive and automated approach to address undiscovered vulnerabilities. Our mission is to empower organizations to leverage the full potential of AI without compromising the safety and trust of their users and data.

Automated GenAI Security AuditingProactive Vulnerability DetectionAdvanced Penetration Testing for AI
Free
API Security

Secure Blink

Secure Blink delivers cutting-edge automated application and API security solutions, empowering development and security teams to proactively safeguard critical assets against exploitation. Our multidisciplinary team of seasoned security engineers, data scientists, designers, developers, and marketers are dedicated to revolutionizing application security by integrating deep domain knowledge with industry expertise to offer innovative solutions that address the dynamic landscape of modern cyber threats.

Automated Application Security ScanningAPI Security and ProtectionProactive Threat Detection

Container Security

View all Container Security tools →
Free
Container Security

Prophaze Technologies

Prophaze Technologies empowers organizations and SaaS providers to elevate web application cybersecurity and reduce operational costs through advanced AI automation. As a Kubernetes-native solution, Prophaze offers comprehensive vulnerability assessment and security best practice analysis for your Kubernetes architecture, seamlessly integrating application security into your DevOps workflows for robust cloud, API, and container protection. We deliver end-to-end enterprise solutions, including architecture review, testing, deployment, and ongoing support, ensuring complete application security across your digital footprint.

AI-driven cybersecurity automationKubernetes-native vulnerability assessmentEnd-to-end application security solutions
Free
Container Security

Aqua Security Software

Aqua Security provides comprehensive cloud native security, safeguarding applications from code to production across containers, serverless, and VMs. By seamlessly integrating DevOps and security, Aqua accelerates digital transformation while ensuring robust protection and simplified compliance through automated threat detection and prevention. Its platform offers end-to-end visibility and control for global enterprises operating in hybrid and multi-cloud environments.

Comprehensive Cloud Native SecurityDevOps and Security IntegrationApplication Lifecycle Security
Free
Container Security

SyncDog

SyncDog is a leading provider of enterprise mobile application security, offering robust protection for containerized apps across cloud and on-premise environments. Our Secure.Systems™ solution empowers organizations to securely enable their mobile workforce, including third-party contractors, by providing integrated endpoint security that adapts to diverse geographic talent pools and existing management solutions.

Containerized Mobile Application SecurityCloud and On-Premise Deployment OptionsSecure Access for Mobile Workforce and Contractors

Software Development Lifecycle (SDLC) Security

View all Software Development Lifecycle (SDLC) Security tools →
Free
Software Development Lifecycle (SDLC) Security

Xygeni Security

Xygeni Security's comprehensive AppSec platform leverages deep contextual insights to proactively identify, prioritize, and mitigate security risks across your entire software supply chain. By automatically detecting and quarantining malicious code in real-time upon new component publication and offering advanced protection for open-source, CI/CD, IaC, and container security, Xygeni empowers your teams to build and deliver secure applications with confidence.

Real-time malicious code detection and quarantineComprehensive Software Supply Chain SecurityOpen Source Component Security
Free
Software Development Lifecycle (SDLC) Security

Vdoo

Vdoo offers a comprehensive end-to-end product security platform designed to automate and streamline all software security tasks across the entire product lifecycle. By intelligently prioritizing, communicating, and mitigating security findings, Vdoo empowers product security stakeholders and developers to significantly reduce cyber risk and unlock new business opportunities within the connected products ecosystem. Acquired by JFrog in 2021, Vdoo delivers powerful, vertical-agnostic solutions for a wide range of industries and organizations involved in connected devices.

End-to-end product security automationFull lifecycle security task managementPrioritization and communication of security findings
Free
Software Development Lifecycle (SDLC) Security

Tromzo

Tromzo empowers organizations to seamlessly integrate security into their development lifecycle, eliminating friction between security and development teams. By centralizing and automating manual workflows, Tromzo simplifies application security (AppSec), enabling rapid scaling of security programs and fostering collaboration. Gain comprehensive visibility and understanding of your entire application stack and uncover critical risk patterns across security and DevOps tooling.

Automate manual AppSec workflowsCentralize security tooling and dataGain full-stack visibility into application security

Web Application Firewalls (WAF)

View all Web Application Firewalls (WAF) tools →
Free
Web Application Firewalls (WAF)

WebSec

WebSec is a premier cybersecurity firm with dual headquarters in Amsterdam, NL, and Wyoming, US, dedicated to fortifying your digital defenses through expert offensive security services. We specialize in advanced penetration testing, sophisticated red teaming, and custom security assessments designed to proactively identify and remediate vulnerabilities before they can be exploited by malicious actors. Our mission is to ensure the robust security of your critical digital assets, including websites and applications, by employing cutting-edge methodologies to safeguard your organization against evolving cyber threats.

Expert Penetration TestingAdvanced Red Teaming OperationsTailored Security Assessments
Free
Web Application Firewalls (WAF)

Virtue Security

Virtue Security is a dedicated firm specializing in advanced web application penetration testing. We go beyond automated scans and generic checklists, employing a sophisticated blend of technical expertise and creative problem-solving to uncover complex vulnerabilities that threaten your business. Our assessments are meticulously tailored to your application's unique technology and business context, ensuring a deep, comprehensive security evaluation.

Specialized Web Application Penetration TestingSimulated Attacker EmulationCustomized Testing Beyond Checklists
Free
Web Application Firewalls (WAF)

Virsec Systems

Virsec Systems provides a deterministic approach to application security, precisely pinpointing and blocking advanced memory-based attacks within business-critical applications in real-time. By mapping correct application behavior and instantly detecting deviations, Virsec eliminates false positives and protects any application, regardless of patching status, from web threats to complex binary attacks.

Deterministic threat detection and remediationReal-time blocking of memory-based attacksApplication behavior mapping

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by