Tech riderRev. 29 Sept 2026
Wallarm API Security
- 1Runs onAPI, Linux, self-hosted, Web
- 2CostsFree plan
- 3API discoveryYes
- 4Runtime protectionYes
- 5API posture managementYes
- 6Sensitive data detectionYes
- 7Specification governanceYes
- 8Deployment modelhybrid
8 lines stated Written from the maker's own pages: wallarm.com, docs.wallarm.com

Overview
Wallarm API Security is ranked #5 of 30 in web application firewall software on Specifiction. It runs on API, Linux, Self-hosted, Web. There is a free plan.
Wallarm API Security plans and pricing
All plansSecurity Edge Free Tier Free Up to 500,000 requests/month · 3 users/company · excludes vulnerability assessment and API Abuse Prevention docs.wallarm.com · 29 Sept 2026
WAAP + Advanced API Security Not published Pricing by request to sales · 6 months event storage · unlimited users docs.wallarm.com · 29 Sept 2026
Cloud Native WAAP Not published Pricing by request to sales · supports all API protocols · 6 months event storage · unlimited users docs.wallarm.com · 29 Sept 2026
Compared on web application firewall software
- Free plan
- Yeswallarm.com
- API discovery
- Yeswallarm.com
- Runtime protection
- Yeswallarm.com
- API posture management
- Yeswallarm.com
- Sensitive data detection
- Yeswallarm.com
- Specification governance
- Yeswallarm.com
- Deployment model
- hybridwallarm.com
Facts
- Product
- Wallarm API Security discovers APIs and protects them in real time against OWASP API Top 10 attacks, abuse, and account takeover.wallarm.com · 29 Sept 2026
- Protocols
- The product covers REST, GraphQL, gRPC, SOAP, and WebSocket APIs without requiring an API specification.wallarm.com · 29 Sept 2026
- Attack protection
- It blocks attacks including injection, BOLA, broken authentication, and zero-day exploits in real time.wallarm.com · 29 Sept 2026
- Abuse prevention
- It detects credential stuffing, account takeover, malicious bots, and L7 DDoS using behavior analysis.wallarm.com · 29 Sept 2026
- Sensitive data
- It surfaces APIs moving personal, payment, credential, or health data and maps that data to compliance scope.wallarm.com · 29 Sept 2026
- Leaked credentials
- API Leak Management scans public sources for API keys, tokens, and credentials associated with customer domains.wallarm.com · 29 Sept 2026
- Integrations
- The product page lists Splunk, Sumo, QRadar, Jira, PagerDuty, OpsGenie, and Slack for event routing.wallarm.com · 29 Sept 2026
- Deployment
- Wallarm supports managed Security Edge deployment and self-hosted deployment options including Kubernetes, cloud VMs, and API gateway connectors.docs.wallarm.com · 29 Sept 2026
- Paid plans
- Wallarm says core subscription plans are activated by contacting sales.docs.wallarm.com · 29 Sept 2026
- Free tier limits
- The Security Edge Free Tier allows 500,000 requests per month and disables console access and integrations after the monthly quota is exceeded.docs.wallarm.com · 29 Sept 2026
- Compliance
- Wallarm states that it is SOC 2 Type 2 compliant.wallarm.com · 29 Sept 2026
Company
- Headquarters
- Austin, Texaswallarm.com · 28 Sept 2026
Best Wallarm API Security alternatives
See all 12 All accessCh 01 F5 BIG-IP APM Free trialAndroidAPI 7.7 All accessCh 02 BunkerWeb Free planFree trialAPI Free to start7.3 All accessCh 03 Fastly Image Optimizer Free planAPILinux from $0.01/mo7.3 All accessCh 04 Gcore WAAP Free planFree trialAPI from €25/mo7.2 All accessCh 06 ModSecurity Free planLinuxMac Free to start6.8 All accessCh 07 Oracle Cloud Infrastructure Secret Management Free planAPIWeb Free to start6.8
Where it ranks on Specifiction
Is Wallarm API Security yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- wallarm.com/product/api-security· checked 29 Sept 2026
- docs.wallarm.com/installation/supported-deployment-optio· checked 29 Sept 2026
- docs.wallarm.com/about-wallarm/subscription-plans/· checked 29 Sept 2026
- wallarm.com/wallarm-soc-2-type-2-compliance· checked 29 Sept 2026



