Code-aware runtime protection that secures APIs and blocks application-layer threats.
Datadog App and API Protection helps Security and DevOps teams secure APIs with unified visibility, posture management, and runtime protection on the same platform they use for observability. It continuously discovers and monitors every API including undocumented shadow APIs, detects OWASP API Top 10 risks, and protects endpoints by blocking specific IPs, users, or requests in real time.
Teams visualize end-to-end attack flows showing how threats propagate across services and pivot from attack signals to related stack traces, errors, and logs. App and API Protection blocks malicious requests at the edge through WAF, CDN, load balancer, or reverse proxy, or directly in-app, and detects business-logic abuse such as account takeover and credential stuffing.
Log Management
Cloud Security Posture Management
Real User Monitoring
Application Performance Monitoring
Infrastructure Monitoring
Network Monitoring
Datadog Dynamic Instrumentation
Datadog Workload Protection
Watchdog
Incident Response
CI/CD Pipeline Visibility
Synthetic Monitoring
Database Monitoring
Cloud Cost Management
| Attribute | App and API Protection | API Security | |
|---|---|---|---|
| Provider | |  | |
| Founded | 2010 | 2005 | |
| Sells To | Enterprise, Small Business | Enterprises, Mid-Market | |
| Pricing Model | Recurring | Services | |
| Ownership | Public | Private |
Provider
Founded 2010
Sells To Enterprise, Small Business
Pricing Model Recurring
Ownership Public
Provider
Founded 2005
Sells To Enterprises, Mid-Market
Pricing Model Services
Ownership Private
Cloud-based dynamic application security testing product for modern web applications and APIs.
Isolated, audit-ready application deployments on AWS with zero-downtime deploys and no AWS configuration required.
AI agent discovery and graph ontology inventory.
Cloud-based dynamic application security testing product for modern web applications and APIs.
AI platform that maps verified cloud and application attack paths to sensitive data.
An AI-native endpoint security platform that discovers software, prevents risk, and enables safe enterprise AI adoption.
API gateway combining routing, security, authentication, failover, and observability.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
AI/LLM Security Assessment tests LLM applications and infrastructure for prompt injection, data poisoning, and model extraction risks.
AI-driven offensive security engineering platform for application and API security testing.
Microsoft Defender for Cloud is a unified cloud-native application protection platform for hybrid and multicloud environments.
Automated DAST scanner for web applications and APIs with CI/CD integration.
Dynamic application security testing platform built into developer workflows and coding agents.
Maps internet exposure to crown jewels using graph-driven transitive risk analysis.
Cloud security posture frameworks with CIS, SOC 2, NIST, and PCI-DSS coverage.
AI platform that maps verified cloud and application attack paths to sensitive data.
An AI-native endpoint security platform that discovers software, prevents risk, and enables safe enterprise AI adoption.
API gateway combining routing, security, authentication, failover, and observability.
Isolated, audit-ready application deployments on AWS with zero-downtime deploys and no AWS configuration required.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
AI/LLM Security Assessment tests LLM applications and infrastructure for prompt injection, data poisoning, and model extraction risks.
AI-driven offensive security engineering platform for application and API security testing.
Microsoft Defender for Cloud is a unified cloud-native application protection platform for hybrid and multicloud environments.
Automated DAST scanner for web applications and APIs with CI/CD integration.
Managed webhook verification and routing into services behind firewalls.
Dynamic application security testing platform built into developer workflows and coding agents.
Maps internet exposure to crown jewels using graph-driven transitive risk analysis.
