ThreatX API and Application Protection

threatx.com

Free trial WebAPISelf-hosted

Visit threatx.com

Spec score 7.5 #13 of 30 in API Security Software

Spec sheet

Product: ThreatX is a managed API and application protection service that protects against Layer 7 threats, including OWASP attacks, bots, malicious automation, DDoS, and API-specific attacks.Read 5 Oct 2026 · threatx.com
Intended users: The overview describes the service as reducing operational overhead and maintenance burdens for enterprises.Read 5 Oct 2026 · threatx.com
Deployment: Deployment options include ThreatX-hosted cloud, machine images for AWS, Azure, and GCP, Docker containers in customer data centers, and hybrid deployments.Read 5 Oct 2026 · threatx.com
Integrations: ThreatX can send webhook notifications to another app, with Slack given as an example.Read 5 Oct 2026 · threatx.com
Privacy: ThreatX says its platform collects and stores as little corporate data as possible while maintaining security and efficacy for protected sites.Read 5 Oct 2026 · threatx.com
Support: The managed service includes 24/7 access to security experts in the ThreatX Security Operations Center.Read 5 Oct 2026 · threatx.com
Company: ThreatX’s homepage says it is now part of A10 Networks.Read 5 Oct 2026 · threatx.com
Agentless architecture: The platform uses reverse-proxy sensors and does not require installing an agent on application servers or workloads.Read 5 Oct 2026 · threatx.com
API discovery: ThreatX discovers and profiles API endpoints by analyzing API traffic in real time.Read 5 Oct 2026 · threatx.com
API formats: The overview guide lists support for JSON, XML, GraphQL, gRPC, SOAP, and URL-encoded endpoints.Read 5 Oct 2026 · threatx.com
Attacker analysis: The platform profiles attacker behavior over time and combines it with threat intelligence and analytics to identify suspicious activity.Read 5 Oct 2026 · threatx.com
Behavior analysis: ThreatX analyzes attacker behavior over time and can block entities based on their risk score.Read 5 Oct 2026 · threatx.com
Cloud providers: The documentation names AWS, Azure, and GCP as supported machine image deployment options.Read 5 Oct 2026 · threatx.com
Company status: ThreatX’s homepage says ThreatX is now part of A10 Networks.Read 5 Oct 2026 · threatx.com
Dashboards: The Attack Dashboard shows threat activity, targets, and attacker locations, while API Defender provides API endpoint and traffic visibility.Read 5 Oct 2026 · threatx.com
Data handling: The platform redacts specified tokens, credentials, and known credit-card and Social Security number patterns before sending sanitized metadata for analysis.Read 5 Oct 2026 · threatx.com
Managed service: The ThreatX SOC handles initial setup and maintenance and monitors API traffic to help prevent attacks and adjust the platform.Read 5 Oct 2026 · threatx.com
Notable limit: Dynamic caching requires an add-on license.Read 5 Oct 2026 · threatx.com
Optional feature limit: Dynamic edge caching requires an add-on license.Read 5 Oct 2026 · threatx.com
Proof of concept: ThreatX says it offers a free proof of concept with help from SOC staff to configure a solution for API and web application protection.Read 5 Oct 2026 · threatx.com
Risk-based response: ThreatX can respond to threats by blocking, alerting, tarpitting, or interrogating IP addresses, with actions informed by risk.Read 5 Oct 2026 · threatx.com
Schema compliance: Users can upload API schemas and compare expected traffic with observed traffic.Read 5 Oct 2026 · threatx.com
Security compliance: ThreatX states that it has an AICPA-auditor-issued SOC 2 Type 2 report covering Security and Availability; the report and bridge letter are available to existing customers who need them.Read 5 Oct 2026 · threatx.com
Sensitive data: The platform can identify personal identification, credit card, and authentication data in API transactions and display it in the API Catalog dashboard.Read 5 Oct 2026 · threatx.com
SIEM logs: Log Emitter exports event logs in JSON Lines format over an encrypted TCP connection, with optional authentication via TLS.Read 5 Oct 2026 · threatx.com
Threat coverage: The platform is designed to protect against OWASP attacks, bots, malicious automation, DDoS, and API-specific attacks.Read 5 Oct 2026 · threatx.com