F5 Distributed Cloud API Security

Discover and map APIs, block unwanted traffic and connections, and prevent data leakage

Improve API Visibility and Protection

APIs change frequently. With F5, easily and continuously identify all API endpoints mapped to your applications, test them and continuously monitor for anomalous activities or shadow APIs including blocking of suspicious requests and endpoints. Our solution automatically generates OpenAPI spec files to minimize manual tracking of API endpoints. Reducing time spent configuring and deploying API security policies.

text

Improve API Visibility and Protection

APIs change frequently. With F5, easily and continuously identify all API endpoints mapped to your applications, test them and continuously monitor for anomalous activities or shadow APIs including blocking of suspicious requests and endpoints. Our solution automatically generates OpenAPI spec files to minimize manual tracking of API endpoints. Reducing time spent configuring and deploying API security policies.

text

Limit Data Loss

Better understand and monitor data being exposed by your APIs. Streamline the discovery, tagging and reporting on data including common PII, compliance related data types (e.g. PCI-DSS, HIPAA, GDPR etc) and customer patterns - with capabilities to limit, mask or block APIs from exposing this data.

Reduce exposure of API vulnerabilities in production

Seamlessly integrate into API code repositories to begin discovering, testing and monitoring your APIs earlier in the development lifecycle. Helping you get visibility and understanding of your APIs and any vulnerabilities before they are released into production ensuring that your APIs meet your security and/or compliance standards. APIs that don’t meet your standards can be protected with compensating controls while code fixes are implemented – limiting the number of unchecked vulnerabilities pushed into production.

text

Reduce exposure of API vulnerabilities in production

Seamlessly integrate into API code repositories to begin discovering, testing and monitoring your APIs earlier in the development lifecycle. Helping you get visibility and understanding of your APIs and any vulnerabilities before they are released into production ensuring that your APIs meet your security and/or compliance standards. APIs that don’t meet your standards can be protected with compensating controls while code fixes are implemented – limiting the number of unchecked vulnerabilities pushed into production.

text

Achieve full API lifecycle security

Integrate security into the CI/CD process through a comprehensive approach to protecting your APIs from design, build and test, and throughout production. Our solution ensures your APIs are secured at every stage, identifying and addressing potential vulnerabilities earlier before release and continuously monitoring and protecting against threats and misuse once released in production.

Product Overview

Discover, detect and protect your APIs with Distributed Cloud API Security

Distributed Cloud API Security combines the power of data analytics and deep insights from AI and machine learning to discover, detect and protect your APIs. Seamlessly identify and block API attacks, eliminate vulnerabilities and prevent sensitive data leakage via APIs. The SaaS-based portal enables users to better understand their complete API inventory and go deep for threat analytics, forensics, and troubleshooting of API communications for modern applications.

Public cloud

Manage and protect application workloads hosted across clouds including AWS, Azure, GCP, etc.

See cloud options ›

On-premises

Manage and protect applications at the data center and edge sites.

See on-premises options ›

F5 Global PoPs

Protect application workloads from any of the points of presence (PoPs) on the F5 global network.

See Global Network Map ›

Core Capabilities

Delivers a broad approach to API security with a combination of complete discovery, vulnerability and threat detection, continuous monitoring, and enforcement functionality to help organization detect and block Open Web Application Security Project (OWASP) API Top 10 attacks.

Automatic API Discovery

Detect and map all APIs directly from code repositories, through traffic analysis and external domain crawling including forgotten, unmanaged and shadow APIs, for a complete view into an apps ecosystem including automatic generation of OpenAPIspec (OAS) files.

API Testing

Targeted testing on discovered API endpoints in pre-production environments with automated testing to uncover vulnerabilities across a wide range of OWASP API Top 10 threats.

Sensitive Data Detection and Protection

Identify and report on sensitive data being exposed including common PII, and data types relevant to critical compliance frameworks (e.g. PCI-DSS, HIPAA, GDPR etc.) – with capabilities to limit, mask or block.

ML-based traffic monitoring + AI assistant

Monitor all traffic through continuous machine learning, allowing organizations to maintain behavioral baselines, while flagging and blocking suspicious activity over time. Augmented with an AI assistant, leveraging the power of natural language queries to streamline analysis of and access to API security events, with context and actionable recommendations.

Authentication Discovery and Risk Scoring

Identify and baseline the authentication state of all APIs within an environment, allowing for automatic discovery with views into authentication status, details, and risk score.

API Protection and Enforcement

Limit, control and block API endpoints and suspicious or malicious activity through a combination of in-line app and API security capabilities with WAF, including granular L7 policy engine.

Import API Schema

Automatically create and enforce a positive security model with learned or existing OpenAPI specifications to control API behavior through valid endpoint, parameter, method, authentication and payload details.

Platform Support and Integrations

Broad platform and cloud provider support
Service discovery and service mesh integrations
Automation, alerting, and SIEM integration

Broad platform and cloud provider support

Distributed Cloud Services can be delivered to apps running on any platform, on any public/private cloud. Distributed Cloud Services helps connect and secure apps running in VMs, containers, bare metal, or serverless.

Service discovery and service mesh integrations

Distributed Cloud Services supports multiple service discovery protocols simultaneously. Consul, Kubernetes, and DNS work out of the box. Istio or Linkerd service mesh can integrate with a Distributed Cloud Services ingress/egress gateway.

Automation, alerting, and SIEM integration

F5’s native Terraform provider, vesctl CLI tool, and public APIs deliver to the automation needs of app teams. Support for tools like Opsgenie or Slack for alerting, and Splunk or Datadog for SIEM, simplify life for DevOps and SecOps teams.