WebShield
A firewall in front ofany app or API.
WebShield is a serverless web application firewall. Real-time threat detection, OWASP rules, bot mitigation and security analytics in front of your APIs and web apps — with nothing to install.
POST /login?user=admin'--
from 203.0.113.42 · hosting network
- IP reputation+40
- Hosting network (ASN)+15
- WAF · OWASP CRS+45
- Bots & AI crawlers—
- CrowdSec—
- Honeypots—
100
threat score
Real-time threat detection
Proactively identify and block malicious traffic before it reaches your applications.
OWASP protection
Detection and mitigation of the OWASP Top 10, SQL injections, cross-site scripting and more.
Customizable rules
Enable, disable or customize individual rules and rule groups to fit each application.
Seamless integration
Works with Cloud APIM API management products for end-to-end security from one platform.
Simplified management
Monitor traffic and adjust policies for all your APIs and web apps in one place.
Analytics & logs
Real-time traffic analytics and detailed security logs to audit and respond quickly.
Threat Studio
See every decision.
Understand every threat.
WebShield is powered by the same engine as our open-source Threat Protection suite for Otoroshi: a JVM-native WAF running the OWASP Core Rule Set, with graded responses and a security console to observe what was blocked, challenged or simply logged — and why.
- OWASP Core Rule Set
- Bot mitigation
- Real-time analytics
- Dry run, then enforce
Pricing
WebShield pricing
All features are included in every plan.
Free
0 €/mo
Test our web application firewall with limited volumes.
Try for free- 1,000 requests / month
- 100 events / month
- 1 environment
Tiger
16.49 €/mo
Essential WAF protection for startups and small teams, optimized for smooth performance.
Subscribe- 50K requests / month
- 5,000 events / month
- 3 environments
Panda
99.99 €/mo
Advanced protection for growing businesses, with bot mitigation and customizable security rules.
Subscribe- 200K requests / month
- 15K events / month
- 10 environments
Bear
399.99 €/mo
Enterprise-grade protection with higher traffic support and tailored policies.
Subscribe- 2M requests / month
- 150K events / month
- 50 environments
Enterprise
A fully customizable solution with dedicated support for critical applications.
- Unlimited requests
- Unlimited environments
- Tailored policies
- Dedicated support
Prices excl. VAT, per month.
FAQ
Frequently asked questions
Still have a question? Talk to our team.
What is Cloud APIM WebShield?
A web application firewall (WAF) designed to secure APIs and web applications. It protects against threats such as SQL injections and cross-site scripting while ensuring optimal performance.
Is WebShield customizable for different applications?
Yes. WebShield offers customizable policies so you can define security rules based on your specific requirements, such as endpoint protection levels and access restrictions.
Can I enable or disable specific WAF rules?
Yes. You can enable, disable or customize individual rules and rule groups to meet the needs of each environment.
Does WebShield affect application performance?
No. WebShield is optimized to filter out malicious traffic efficiently without affecting the speed of your applications.
Does WebShield provide analytics and logs?
Yes. WebShield includes real-time traffic analytics and detailed security logs, so your teams can monitor, audit and respond quickly.
I run my own Otoroshi. Is there an equivalent?
Yes, the open-source Threat Protection suite brings a JVM-native WAF with the OWASP Core Rule Set, IP reputation, bot control and Threat Studio to any Otoroshi cluster.
Ready to build?Start in minutes.
Spin up a managed Otoroshi cluster or a serverless project for free, or ask us for a live demo of the whole platform.