API Shield

Secure Your API Resources with Full-cycle Management
API security has emerged as a key priority for protecting vital data and services. CDNetworks’ API Shield is an API security solution designed to identify flaws in APIs and harden your API security posture. Unlike one-off tools and scanners, API Shield is based on a platform of capabilities that combines management, protection, and analysis functions. Rooted in CDNetworks’ intelligent engine, API Shield runs multiple detection processes simultaneously in real time to detect vulnerabilities in your APIs and shield them from exploitation, drives your business forward while improving awareness of your API attack surface.

API Security Solution

A single and easy-to-use solution to secure and manage your APIs.

24/7/365 Monitoring

Monitor API activities, detect abnormal API behaviors in real time.

Distributed Architecture

Deployed on globally distributed 2,800+ PoPs to achieve global load balancing seamless single-node failover.

Apply for a FREE Trial

  • Hidden
    Product of Interest
  • This field is for validation purposes and should be left unchanged.

Features

API Inventory

Defines API resources and manages their privacy and other vital status conditions across their full lifecycle.

API Request Quota Management

Manages quota limits on API requests for each API consumer across various time periods to ensure consistent availability and performance.

Limiting Concurrent Requests

Limits the number of the API requests in the configured time period for the API assets to avoid impacting the performance of API servers.

API Permission & Scope Management

Customizes the scope of API inventory and customer permissions to restrict the authentication.

Compliance Detection

Refines and verifies the body or parameters of requests to identify and intercept the illegal request effectively.

Authentication

Verifies the credibility of API requests by detecting dynamic authentication tokens in the request; Blocks those API requests with fake identities.

One-stop Security Service

A strong API strategy requires tools that work in concert to promote a strong API security strategy. API Shield is built to offer integration with Application Shield (DDoS Mitigation and WAF) and Bot Shield (Bot Management) to provide a  comprehensive, one-stop cloud Web Application and API Protection (WAAP) . Visualizing your data across different security products provides unique, multi-layered detection capabilities to accurately identify malicious actors and respond.

Sensitive Info Leakage Prevention

API Shield identifies whether API responses include proprietary and confidential information, and then masks personally identifiable information in real time to limit the attack surface and make it less likely for sensitive data to be stolen.

Visual Dashboard

API Shield allows API traffic traversing the CDNetworks platform to be analyzed and correlated in context from many perspectives — including API distribution, API request trends, request source distributions, consumer calls, and risk event trends — to deliver the most accurate results. These multi-dimensional views into the flow of transactions through your API traffic provide real-time insight and context into API active status conditions and risk potentials to see which threats are being faced by your APIs and which attackers pose the greatest risks.

How It Works

API Shield is deployed on CDNetworks’ globally distributed PoPs from where it detects suspicious and malicious API requests in real time, and then blocks the request or takes other proactive actions based on the observed risk and type of threat.

Using a cloud-based big data analytics platform and high-performance analysis cluster, API Shield can upload log files to big data analysis platforms, and find trends and patterns to help guide your business decisions, investigations, and security.