Akamai App & API Protector is a single solution that brings together many security technologies including web application firewall, bot mitigation, API security, and DDoS protection. App & API Protector is recognized as the leading attack detection solution, quickly identifying and mitigating threats beyond the traditional firewall to protect entire digital estates from multidimensional attacks. The platform is easier to implement and use, provides holistic visibility, and automatically implements up-to-date, customized protections via Akamai Adaptive Security Engine.

The power of adaptive security

With App & API Protector, security protections are continually and automatically updated, with customized policy recommendations implemented with a single click. Adaptive Security Engine, the technology at the core of App & API Protector, provides modern protection by combining machine learning, real-time security intelligence, advanced automation, and insights from more than 400 threat researchers. Adaptive Security Engine is unique because it:

• Analyzes the characteristics of every request in real time at the edge for faster detection
• Learns attack patterns by leveraging both local and global data to make customer-specific protection adjustments
• Adapts to future threats, which ensures updated protections even as attacks evolve

Adaptive Security Engine alleviates the burden of time-consuming, manual tuning with zero-touch updates for a nearly hands-off experience, improving detections by 2x and reducing false positives by 5x. Security professionals can be heroes again, with more time to focus on enabling secure, and customer-friendly, digital business operations.

Leading attack detection

As your digital environment grows, so does the depth and breadth of your protections as an Akamai customer. In addition to the automatic updates and adaptive self-tuning that Adaptive Security Engine delivers, App & API Protector provides analyst-recognized leading detections for distributed denial of service (DDoS), bot, malware, and more attack vectors.

DoS/DDoS protection — Recognized as a market-leading DDoS solution, App & API Protector instantly drops network-layer DDoS attacks at the edge. You are not only protected from DDoS attacks but also the traffic spikes of an attack — Akamai DDoS Fee Protection provides credit for any overage fees incurred due to a DDoS attack.

Bot mitigation visibility — Gain real-time visibility into your bot traffic with access to Akamai’s expansive directory of more than 1,700 known bots. Investigate skewed web analytics, prevent origin overload, and create your own bot definitions to permit access to third-party and partner bots without obstruction. Increase your bot security controls with Akamai Bot Manager Premier to protect against credential stuffing, web scraping, mass account creation, inventory manipulation, and card cracking. 

Malware protection — This add-on module can scan files before they’re uploaded at the edge to detect and block malware from entering your corporate systems as malicious file uploads. With no additional app or API configuration required, you free up the time you’d spend setting up protection in each system individually.

Site Shield — Prevent attackers from bypassing cloud-based protections and targeting your origin infrastructure with this customer-favorite product that is now included in App & API Protector. Other products in Akamai’s security portfolio, Page Integrity Manager, Account Protector, and Audience Hijacking Protector, can extend your in-browser security capabilities.

Download the Product Brief if you want to know more.