Sold by: Wallarm
Wallarm protects your entire API portfolio with advanced API security capabilities.
4.7
Overview
Protect any API. In any environment. Against any threat.
Built by security practitioners for practitioners, Wallarm's integrated API security platform provides robust protection for APIs, web apps, microservices, and serverless workloads in cloud-native, multi-cloud, k8, and on-premises environments. It combats OWASP API Top-10 risks and advanced threats, ensuring visibility and rapid vulnerability remediation.
The Wallarm platform is best-in-class, and adaptable, supporting modern tech stacks and multiple deployment options. Valued by security teams globally, Wallarm facilitates comprehensive API discovery and automated incident response. Compatible with various environments, its solution is chosen by leading enterprises. Leading in API Security, Wallarm provides a unified, automated solution for diverse application landscapes.
Wallarm is headquartered in San Francisco, California, and is backed by Toba Capital, Y Combinator, Partech, and other key investors.
Highlights
- Protect your APIs against OWASP API Security Top-10 risks and other advanced API threats like Injections, BOLA and authentication failures.
- Get runtime visibility across your entire API portfolio, minimize API drift and prioritize security efforts (like pen tests or bug bounties) with alerts on new, changed or deprecated endpoints.
- Meet compliance requirements by tracking and protecting sensitive data, including PII, financial & health data, credentials and more.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Wallarm Entry | Web & API Security Unlimited Users & API Up to 150M Request/Month | $233,000.00 |
Wallarm Enterprise | Web & API Security - Unlimited Users & API Up to 1B Request/Month | $480,000.00 |
Dimension | Description | Cost/unit |
|---|---|---|
additional | Additional Usage | $1.00 |
Dimensions summary
This contract-based listing offers two request-volume tiers plus one add-on. Wallarm Entry covers web and API security for unlimited users and APIs up to 150 million requests per month. Wallarm Enterprise raises that ceiling to 1 billion requests per month, again with unlimited users and APIs. You pick the tier that matches your monthly API request volume. The Additional Usage dimension is an add-on. It lets you pay for consumption beyond your committed tier limit, so overage does not require moving to a new contract.
Top-of-mind questions for buyers
Each tier meters the number of API requests processed per month across the platform. Requests span REST, GraphQL, gRPC, SOAP, and WebSocket traffic through one inline engine. Entry covers up to 150 million requests monthly. Enterprise covers up to 1 billion requests monthly. Users and APIs are unlimited in both.
The Additional Usage dimension covers requests beyond your committed tier ceiling. You pay for that overage as it occurs, rather than moving to a new contract. This lets your bill absorb short-term spikes above your monthly request commitment without a tier change.
Your chosen tier sets the base commitment for monthly request volume. The Additional Usage charge applies only when you exceed that committed ceiling. For steady traffic within your limit, the tier drives cost alone. Additional Usage adds to the bill only during overage months.
www.wallarm.com
Helpful?
Vendor refund policy
All fees are non-refundable and non-cancellable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
24/7 Global Support
support@wallarm.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Protect APIs and AI agents by integrating Wallarm with your existing NGINX traffic management, enabling real-time threat mitigation, full API visibility, and risk detection.
Protect APIs and AI agents handled by Cloudflare, CloudFront, MuleSoft, and similar platforms in synchronous or asynchronous mode, with full API visibility and risk detection.
Wallarm Infrastructure Discovery continuously inventories your AWS estate across every connected account and region, with no agent to install. Connect an AWS account via cross-account IAM role with external ID, AWS SSO profile, or static access key, and the first scan delivers a live, searchable inventory of EC2 instances, VPCs and their networking, EKS clusters, Lambda functions, load balancers, and API Gateway deployments. Drift detection records every field-level change so you can answer "what changed since last week." Built-in detection rules and customer-authored CEL rules surface exposure and misconfiguration. HTTP endpoints are detected automatically across EC2 instances, EKS pods, and load balancers on every scan. Built for security, platform, and compliance teams who need a defensible answer to what they have, what changed, and what is exposed. On-ramp to the Wallarm AI Control Platform.
Wallarm AI Hypervisor is the runtime governance layer for every LLM call, agent action, and MCP tool invocation running in AWS. Deploy and within minutes every outbound AI call is captured in-kernel and attributed to the originating end-user across every service hop. Built on patented non-invasive memory analysis, AIH covers AI interactions without requiring a single application code change. Review the prompt that produced a bad answer. Block a session in real time without restarting pods. Prove to auditors what data left for which model provider, on whose behalf. Recognizes Anthropic, OpenAI, AWS Bedrock, Azure OpenAI, Hugging Face, Together, and more than 11 others out of the box. Part of the Wallarm AI Control Platform.
Customer reviews
Revell B.
Revolutionized Our API Security, Peace of Mind Restored
Reviewed on Jul 14, 2026
Review provided by G2
What do you like best about the product?
I started using the Wallarm API Security Platform and immediately saw how bad my security issues were, with known attackers targeting my most sensitive endpoints. But once I set up Wallarm protections, the problematic traffic calmed down, to the point where I had my first attack-free day within a week. It also allowed me to dial back on Cloudflare WAF rules, which used to cause more issues than they solved. By managing security through Wallarm, I no longer have to spend time dealing with emails from confused users due to overly broad Cloudflare rules. Announcing that Wallarm was handling my security gave my users confidence because of its strong reputation. Wallarm has truly saved my business and given me my life back by allowing normal sleep and work hours again.
What do you dislike about the product?
I had some trouble setting up inline Security Edge at first because Cloudflare was already proxying my traffic, and I think I just got the order wrong. While it's working great now, at first I wasn't 100% sure I set up inline correctly. Most of my confusion happened with Cloudflare's DNS settings. It was also a little scary doing this in the middle of the night to avoid interrupting user flows, which added some pressure. The setup was complicated only due to Cloudflare and not a Wallarm issue, and every step on the Wallarm side was easy and intuitive.
What problems is the product solving and how is that benefiting you?
I use Wallarm API Security Platform to protect my API endpoints against attackers. It calmed down malicious traffic, stopped attacks, and solved my security issues. Wallarm saved my business and personal time by providing efficient security, allowing me to reduce dependency on Cloudflare and avoid user complaints.
Adesh R.
Accurate Real-Time API Threat Detection with Minimal False Positives
Reviewed on Jan 02, 2026
Review provided by G2
What do you like best about the product?
It provides accurate, real-time API threat detection with very few false positives.
What do you dislike about the product?
The platform's configuration and tuning process can be quite complex and time-consuming, especially for new users.
What problems is the product solving and how is that benefiting you?
It protects APIs and web applications from modern attacks, including those listed in the OWASP Top 10 and zero-day threats.
Alexander S.
API threat prevention
Reviewed on Jan 03, 2025
Review provided by G2
What do you like best about the product?
As a tech entrepreneur, I appreciate how simple integration is, and API threat prevention is what I like mostly.
What do you dislike about the product?
No configuration for dashboard; require demo call.
What problems is the product solving and how is that benefiting you?
It helps safeguard my APIs by enhancing risk management and security visibility
Aziz T.
Secure , comprehensive customizable
Reviewed on Oct 24, 2024
Review provided by G2
What do you like best about the product?
Wallarm API Security Platform provides robust protection for APIs with real-time threat detection, minimizing false positives . Especially secure against the top 10 OWASP
What do you dislike about the product?
API threat detection , the pricing is undisclosed in the fee trial
What problems is the product solving and how is that benefiting you?
Top 10 OWASP
Information Technology and Services
Easy to understand and implement
Reviewed on Oct 24, 2024
Review provided by G2
What do you like best about the product?
As a developer, it's very easy to implement and the documentation it's easy to implement.
What do you dislike about the product?
That you have to book a demo to try it out.
What problems is the product solving and how is that benefiting you?
Helps me to protect my APIs, risk management and security dicovery.