API Security

Now pick what to compare Wallarm against.

Wallarm clear

Open a name for its full profile

Akamai API Security
Capabilities only
Akamai Technologies · Commercial · 4 capabilities in this domain
Compare →
Cequence Unified API Protection
Capabilities only
Cequence Security · Commercial · 4 capabilities in this domain
Compare →
Cloudflare API Shield
Capabilities only
Cloudflare · Commercial · 4 capabilities in this domain
Compare →
Salt Security API Protection Platform
Capabilities only
Salt Security · Commercial · 4 capabilities in this domain
Compare →
Traceable API Security
Capabilities only
Harness · Commercial · 4 capabilities in this domain
Compare →
42Crunch API Security Platform
Capabilities only
42Crunch · Freemium · 3 capabilities in this domain
Compare →
Escape
Capabilities only
Escape Technologies · Commercial · 3 capabilities in this domain
Compare →
Wallarm
Capabilities only
Wallarm · Commercial · 3 capabilities in this domain
selected
Microsoft Defender for APIs
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Postman API Governance
Capabilities only
Postman · Commercial · 2 capabilities in this domain
Compare →
Kong Gateway
Capabilities only
Kong · Freemium · 1 capabilities in this domain
Compare →
Spectral
Capabilities only
SmartBear · Open Source · 1 capabilities in this domain
Compare →

In API Security

Escape

Escape Technologies · API Security

Close ×

CommercialCompany

Escape discovers APIs from code and traffic and tests authorization and business logic with multiple user roles.

What it does3 capabilities · 2 at full coverage

2 of 3 at full coverage.

API Discovery & InventoryPartialAPI · level 2 · 13 providers
API Security TestingFullAPI · level 2 · 12 providers
Broken Object Level Authorization TestingFullAPI · level 3 · 2 providers

What it proves17 controls across 8 frameworks

Satisfied through its capabilities, not claimed by the vendor.

API Top 107 / 10API1:2023 API2:2023 API3:2023 API5:2023 API7:2023 API8:2023 API9:2023
CNAS Top 103 / 10CNAS-2 CNAS-3 CNAS-8
ASVS 5.02 / 17V4 V8
CIS Controls1 / 18CIS 2
CSF 2.01 / 106ID.AM-02
DSOMM1 / 19TV-Dynamic-Depth-Applications
OWASP Top 101 / 10A01:2025
SSDF 1.11 / 42PW.8.2

What it stops1 technique · 1 risk

1 techniques countered, 1 of them common

Broken Object Level Authorization ExploitationVery Common

1 risks reduced

API exposes data through broken authorizationCritical

Where it runs3 phases · 1 way to deploy

Capabilities per lifecycle phase

Code1
Test2
Operate1

How it is delivered

SaaS

What it unlocks4 activities · reaches level 5

Program activities its capabilities support, reaching level 5. Supporting an activity is not completing it.

Level 1

Inventory APIsMedium effort

Level 2

Run DAST against ephemeral environmentsMedium effort

Level 3

Test object and function level authorizationMedium effort

Level 5

Authorization by design across all APIsHigh effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPlatform enterprise agreement

LicensingPlatform enterprise agreement

Priced perannual contract

BillingSubscription

Scales withNegotiated scope (developers, assets, modules)

Total cost

Opaque list pricing; benchmark with peers and require clear overage terms.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with2 standards

Standards and formats

GraphQLOpenAPI Specification

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13