Akamai App & API Protector
Web application firewall, bot and DDoS protection for websites and APIs.
Network Segmentation
Web application firewall and DDoS protection
Websites and APIs stay up, and common web attacks are filtered before they reach them.
Addresses 53 stories in our coverage in the last 90 days 4 products that provide it
What it is
A protective layer in front of websites and APIs that absorbs denial-of-service floods and blocks injection attacks, bots and abuse.
How to value it
DDoS attacks by hacktivists against European organisations are a recurring news item, and an hour of downtime for a customer-facing site has a direct cost. A web application firewall also buys time when a flaw in a web application is published before you can patch it.
Questions to ask a vendor
- 1What is the mitigation capacity, and is DDoS protection unmetered?
- 2How fast can you deploy a virtual patch for a new vulnerability?
- 3Does it protect APIs as well as websites?
- 4Where is traffic inspected, and what does that mean for data residency?
For your risk register
- Risk
- Outage of customer-facing services through DDoS, or exploitation of web application flaws.
- Control
- Web application firewall and DDoS protection on all public web services.
- Owner
- Web platform lead.
- Measure
- Share of public services behind the protection layer.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Cloudflare WAF and DDoS protection
Web application firewall and unmetered DDoS mitigation for websites and APIs.
F5 Web App and API Protection
Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.
Imperva Cloud WAF
Cloud web application firewall with DDoS and bot protection.
Recent stories it addresses
130 stories in total- 12 Nov 2026Critical Apache HTTP/2 Vulnerability (CVE-2026-119618): How Imperva Protects Customers
Critical Apache HTTP/2 vulnerability CVE-2026-119618 allows remote code execution.
- 12 Nov 2026Siemens Industrial Edge Management
Siemens Industrial Edge Management affected by Node2Shell buffer overflow (CVE-2026-111497)
- 10 Nov 2026Dark Storm Team Expands DDoS-for-Hire Operations, Demands $5,000 to Stop Alleged Amino Attack
Dark Storm Team offers DDoS-for-hire services and extorts victims, demanding $5,000 to stop an alleged Amino attack.
- 9 Nov 2026Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns
Researchers exploited flaws in automakers' Android apps to remotely unlock cars and honk horns.
- 9 Nov 2026ModSecurity Patches Two High-Severity Flaws Allowing WAF Bypass and Potential Remote Code Execution
ModSecurity patches two high-severity flaws enabling WAF bypass and potential RCE.
- 6 Nov 2026Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution
Hackers launched 240,000 exploit attempts against a WordPress Core vulnerability.
- 31 Oct 2026Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
WordPress RCE vulnerability targeted by over 60,000 attacks within 24 hours.
- 31 Oct 2026Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Cloudflare reports 18.2M network-layer DDoS attacks in Q3, a 38% increase.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.