Skip to content
SPECIFICTION
Get listed

Wallarm API Security

wallarm.com

Free plan WebLinuxAPISelf-hosted
Visit wallarm.com
Spec score 7.3 #17 of 30 in API Security Software

What it is

Wallarm API Security discovers APIs and protects them in real time against attacks, abuse, and account takeover. It covers REST, GraphQL, gRPC, SOAP, and WebSocket APIs without requiring an API specification, and can identify shadow, zombie, and rogue APIs. The product can generate OpenAPI specifications from live traffic and block attacks such as injection, BOLA, broken authentication, and zero-day exploits. Behavior analysis detects credential stuffing, account takeover, malicious bots, and L7 DDoS. It can surface APIs handling personal, payment, credential, or health data and map that information to compliance scope. API Leak Management scans public sources for keys, tokens, and credentials associated with customer domains. Deployment options include managed Security Edge and self-hosted Kubernetes, cloud VM, and API gateway connector setups. The Security Edge Free Tier allows 500,000 requests per month for three users per company and excludes vulnerability assessment and API Abuse Prevention. Once the monthly quota is exceeded, console access and integrations are disabled. Paid core plans require contacting sales for pricing; listed paid plans include six months of event storage.

Spec sheet

Product
Wallarm API Security discovers APIs and protects them in real time against OWASP API Top 10 attacks, abuse, and account takeover.Read 29 Sep 2026 · wallarm.com
Deployment
Wallarm supports managed Security Edge deployment and self-hosted deployment options including Kubernetes, cloud VMs, and API gateway connectors.Read 29 Sep 2026 · docs.wallarm.com
Integrations
The product page lists Splunk, Sumo, QRadar, Jira, PagerDuty, OpsGenie, and Slack for event routing.Read 29 Sep 2026 · wallarm.com
Compliance
Wallarm states that it is SOC 2 Type 2 compliant.Read 29 Sep 2026 · wallarm.com
Headquarters
Wallarm says it is headquartered in Austin, Texas.Read 29 Sep 2026 · wallarm.com
Abuse prevention
It detects credential stuffing, account takeover, malicious bots, and L7 DDoS using behavior analysis.Read 29 Sep 2026 · wallarm.com
API discovery
It finds shadow, zombie, and rogue APIs and can auto-build OpenAPI specifications from live traffic.Read 29 Sep 2026 · wallarm.com
Attack protection
It blocks attacks including injection, BOLA, broken authentication, and zero-day exploits in real time.Read 29 Sep 2026 · wallarm.com
Free tier limits
The Security Edge Free Tier allows 500,000 requests per month and disables console access and integrations after the monthly quota is exceeded.Read 29 Sep 2026 · docs.wallarm.com
Leaked credentials
API Leak Management scans public sources for API keys, tokens, and credentials associated with customer domains.Read 29 Sep 2026 · wallarm.com
Paid plans
Wallarm says core subscription plans are activated by contacting sales.Read 29 Sep 2026 · docs.wallarm.com
Protocols
The product covers REST, GraphQL, gRPC, SOAP, and WebSocket APIs without requiring an API specification.Read 29 Sep 2026 · wallarm.com
Sensitive data
It surfaces APIs moving personal, payment, credential, or health data and maps that data to compliance scope.Read 29 Sep 2026 · wallarm.com

Plans and prices

Security Edge Free Tier Free Up to 500,000 requests/month · 3 users/company · excludes vulnerability assessment and API Abuse Prevention Read 29 Sep 2026 · docs.wallarm.com
Cloud Native WAAP Priced on request Pricing by request to sales · supports all API protocols · 6 months event storage · unlimited users Read 29 Sep 2026 · docs.wallarm.com
WAAP + Advanced API Security Priced on request Pricing by request to sales · 6 months event storage · unlimited users Read 29 Sep 2026 · docs.wallarm.com

Every Wallarm API Security plan and price →

Strong points and limits

Strong points

  • Covers REST, GraphQL, gRPC, SOAP, and WebSocket.
  • Can discover APIs without an API specification.
  • Builds OpenAPI specifications from live traffic.
  • Detects sensitive data and leaked credentials.
  • Offers managed and self-hosted deployments.

Limits

  • Free tier is limited to 500,000 requests monthly.
  • Free tier is limited to three users per company.
  • Free tier excludes vulnerability assessment and API Abuse Prevention.
  • Paid plan pricing requires contacting sales.

Who it suits

Wallarm API Security suits teams seeking API discovery and runtime protection across the listed API protocols. Its managed and self-hosted deployments offer options for organizations with different deployment needs.

Verdict

Wallarm combines API discovery, attack protection, abuse detection, and sensitive-data visibility across several deployment options. Check the free-tier exclusions and quota behavior, and request sales pricing for paid plans.

Where Specifiction places it

Alternatives to Wallarm API SecurityAll alternatives →