Overview

Whether it’s a known edge API, an unknown shadow API or internal API driving transactions on the backend, discovering APIs is essential for establishing a positive security model for API Security. Imperva API Security provides continuous discovery of your APIs. More importantly, Imperva offers contextual insights, ranging from detection of sensitive data such as personal identifiable information (PII) to classification of APIs based on data and coding risks.

Through automatic detection of API endpoints, Imperva API Security enables API visibility for security teams – without requiring development to publish APIs via OpenAPI or by adding resource-intensive workflow to their CI/CD processes – by providing full contextual data and tags and automatically determining risks around sensitive data. Security teams can incorporate a positive security model to protect their organization from API-based threats. Moreover, every time an API is updated, security teams can stay on top of the change, understand any new risks and incorporate changes, which leads to faster, more-secure software release cycles. Imperva API Security enables security teams to keep pace with innovation without impacting development velocity.

Imperva API Security also protects against the latest Open Web Application Security Project (OWASP) API Security Top 10 as developers build microservices and APIs across different environments.