F5 Distributed Cloud API Security

Score9.1 out of 10

48 Reviews and Ratings

What is F5 Distributed Cloud API Security?

F5's Distributed Cloud API Security provides discovery and deep insights from use of AI/ML. It can be used to block API attacks in real time and eliminate vulnerabilities at their source. The SaaS-based portal enables users to manage and go deep for threat analytics, forensics, and troubleshooting of modern applications.

Categories & Use Cases

API Security

Media

1 / 3

Denial of Service (DoS) Protection
Mitigates DoS attacks by monitoring the API traffic for suspicious patterns and blocking or rate limiting requests from potential malicious sources.
Category average: 9.2
Security Notification and Alerts
Sends real-time notifications and alerts when security events or anomalies are detected, allowing prompt investigation and response to potential threats
Category average: 9.2
API Key Management
Provides mechanisms to generate, manage, and revoke API keys or tokens that are used for authentication and access control.
Category average: 9.2

Cross-origin Resource Sharing (CORS) Protection
Enforces restrictions on cross-origin requests, preventing unauthorized access to resources on the API server from web pages served by other domains.
Category average: 9
Input Validation
Validates and sanitizes user input to prevent common attack vectors such as SQL injection, cross-site scripting, and command injection.
Category average: 8.8
Content Filtering
Scans the content of API requests and responses for potentially malicious or unwanted content, such as malware or sensitive data, to prevent data leakage and protect against attacks.
Category average: 8.8

Pros

Strong API security and protection capabilities
Easy implementation and user-friendly interface
WAF capabilities for traffic control

Verified User

Engineer in Information Technology (51-200 employees employees)

Use Cases and Deployment Scope

We are using F5 Cloud API Security to monitor and govern all external-facing APIs across our genomics data platforms and third-party clinical integrations. It sits right behind our API gateway layer and works across both our on-prem research servers and cloud-hosted ML pipelines. Our services move quickly, and F5 helps maintain our security posture throughout it all.

Pros

It auto-discovers APIs, even the ones engineers forget to document. Then profiles them without needing changes to our codebase.
Shadow API exposure.
It's pretty decent at abnormal behavior detection.

Cons

Their dashboard, in my opinion, has been over-engineered. The insight is there, but bringing it to the surface is no easy task. We've had to build Grafana visualizations.

Return on Investment

The biggest one for us so far has been a secure-by-default culture in API development. This now reduces our onboarding time by about 20 percent, all thanks to the inline control and templated policies.
Uncountable value in prevention of costly data leakages.

Usability

Alternatives Considered

Salt Security API Protection Platform

Other Software Used

AWS CloudTrail, Trello, Webex App

Verified User

Engineer in Information Technology (1-10 employees employees)

Use Cases and Deployment Scope

I use F5 Distributed Cloud API Security for Load balancing

Pros

Load balance
Security
Application

Cons

Layer 7
Application

Return on Investment

Security
Cost savings
Streamline security operations

Usability

Other Software Used

Microsoft Windows, AWS DeepLens, Adobe Acrobat

Verified User

Supervisor in Engineering (11-50 employees employees)

Use Cases and Deployment Scope

We use the F5 Distributed Cloud API Security to secure our APIs that we discovered with API Discovery. The module allow us to block paths and methods that we don't know we are exposed.

Pros

Rate limiting
Block paths
Block methods

Cons

Licensing method

Return on Investment

Cost savings
Time saving

Usability

Verified User

Manager in Information Technology (11-50 employees employees)

Use Cases and Deployment Scope

We deploy F5 Distributed Cloud API Security to monitor data traffic in real time to detect anomaly behavior, to thwart potential cyber incident

Pros

Real time monitor
Meta data extraction
Traffic alert

Cons

Distributed monitor
Meta data encryption
Higher throughput

Return on Investment

Reduce response time
Reduce IT personal
Mitigate ddos impact

Usability

Chandramohan Chinnadurai

Solution Architect in Information Technology at Bharti Telco (5001-10,000 employees employees)

Use Cases and Deployment Scope

I use F5 Distributed Cloud API Security to access SWIFT Financial network APIs for pre-validation, GPI and Swift Ref

Pros

scalable
more secured
on-demand service availability

Cons

Provide more use case scenarios
GUI enhancement
Enhanced dashboard to view API usage history and logs

Return on Investment

It provides ROI in a shorter time

Usability

Cloudflare

Akamai App & API Protector

Salt Security API Protection Platform

Noname Security

Cequence Security

F5 Distributed Cloud API Security

What is F5 Distributed Cloud API Security?

Categories & Use Cases

Media