F5 Distributed Cloud API Security

Learn more about the recent F5 and Wib API security announcement ›

Discover and map APIs, block unwanted traffic and connections, and prevent data leakage

Improve API Visibility and Protection

APIs change frequently. With F5, easily and continuously identify all API endpoints mapped to your applications and monitor anomalous activities or shadow APIs including blocking of suspicious requests and endpoints. Our solution helps you generate OpenAPI spec files to minimize manual tracking of API endpoints while reducing time spent configuring and deploying API security policies.

text

Improve API Visibility and Protection

APIs change frequently. With F5, easily and continuously identify all API endpoints mapped to your applications and monitor anomalous activities or shadow APIs including blocking of suspicious requests and endpoints. Our solution helps you generate OpenAPI spec files to minimize manual tracking of API endpoints while reducing time spent configuring and deploying API security policies.

text

Limit Data Loss

Better understand and monitor data being exposed by your APIs. Streamline the discovery, tagging and reporting on data including common PII, compliance related data types (e.g. PCI-DSS, HIPAA, GDPR etc) and customer patterns - with capabilities to limit, mask or block API from exposing this data.

Reduce exposure of API vulnerabilities in production

Seamlessly integrate into API code repositories to begin discovering and monitoring your APIs earlier in the development lifecycle. Helping you get visibility and understanding of your APIs and any vulnerabilities before they are released into production ensures that your APIs meet your security and/or compliance standards, APIs that don’t meet your standards can be protected while code fixes are implemented – limiting the number of unchecked vulnerabilities pushed into production.

text

Reduce exposure of API vulnerabilities in production

Seamlessly integrate into API code repositories to begin discovering and monitoring your APIs earlier in the development lifecycle. Helping you get visibility and understanding of your APIs and any vulnerabilities before they are released into production ensures that your APIs meet your security and/or compliance standards, APIs that don’t meet your standards can be protected while code fixes are implemented – limiting the number of unchecked vulnerabilities pushed into production.

text

Achieve full API lifecycle security

Integrate security into the CI/CD process through a comprehensive approach to protecting your APIs from design, build and test, and throughout production. Our solution ensures your APIs are secured at every stage, identifying and addressing potential vulnerabilities earlier before release and continuously monitoring and protecting against threats and misuse once released.

Product Overview

Discover, govern, and protect your APIs with Distributed Cloud API Security

Distributed Cloud API Security provides discovery and deep insights from use of AI/ML. Identify shadow APIs and block API attacks in real time and eliminate vulnerabilities at their source. The SaaS-based portal enables users to manage and go deep for threat analytics, forensics, and troubleshooting of API communications for modern applications.

Public cloud

Manage and protect application workloads hosted across clouds including AWS, Azure, GCP, etc.

See cloud options ›

On-premises

Manage and protect applications at the data center and edge sites.

See on-premises options ›

F5 Global PoPs

Protect application workloads from any of the points of presence (PoPs) on the F5 global network.

See Global Network Map ›

Core Capabilities

Delivers a broad approach to API security with a combination of governance, monitoring, and enforcement functionality to help organizations detect and block Open Web Application Security Project (OWASP) API Top 10 attacks.

Automatic API Discovery

Detect and map all APIs directly from code repositories and through traffic analysis including forgotten and shadow APIs, for a complete view into an apps ecosystem including automatic generation of OpenAPIspec (OAS) files.

Import API Schema

Automatically create and enforce a positive security model with learned or existing OpenAPI specifications.

Sensitive Data Detection and Protection

Identify and report on sensitive data being exposed including common PII, and data types relevant to critical compliance frameworks (e.g. PCI-DSS, HIPAA, GDPR etc.) – with capabilities to limit, mask or block.

ML-based traffic monitoring

Monitor all traffic through continuous machine learning, allowing organizations to maintain behavioral baselines, while flagging and blocking suspicious activity over time.

Authentication Discovery and Risk Scoring

Identify and baseline the authentication state of all APIs within an environment, allowing for automatic discovery with views into authentication status, details, and risk score.

API Protection and Enforcement

Limit, control and block API endpoints and suspicious or malicious activity through a combination of in-line app and API security capabilities with WAF, including granular L7 policy engine.

Platform Support and Integrations

Broad platform and cloud provider support
Service discovery and service mesh integrations
Automation, alerting, and SIEM integration

Broad platform and cloud provider support

Distributed Cloud Services can be delivered to apps running on any platform, on any public/private cloud. Distributed Cloud Services helps connect and secure apps running in VMs, containers, bare metal, or serverless.

Service discovery and service mesh integrations

Distributed Cloud Services supports multiple service discovery protocols simultaneously. Consul, Kubernetes, and DNS work out of the box. Istio or Linkerd service mesh can integrate with a Distributed Cloud Services ingress/egress gateway.

Automation, alerting, and SIEM integration

F5’s native Terraform provider, vesctl CLI tool, and public APIs deliver to the automation needs of app teams. Support for tools like Opsgenie or Slack for alerting, and Splunk or Datadog for SIEM, simplify life for DevOps and SecOps teams.