AWS WAF

Web application firewall and API protection delivered on Akamai's edge, combining adaptive WAF rules, API discovery, bot visibility and DDoS mitigation for web apps and APIs

Bot detection and mitigation at the Akamai edge using behavioural analysis and device fingerprinting, with configurable actions per bot category

Managed WAF protecting web apps from OWASP Top 10 attacks, bot traffic, API abuse, and data scraping, with global and China regional deployment, custom rule engine, and unified consoles across Anti-DDoS and Security Center

Layer 7 load balancer with integrated web application firewall, SSL termination, URL-based routing, cookie-based session affinity, and autoscaling based on traffic

Global application delivery network and CDN with anycast acceleration, caching, rules engine, WAF, bot protection and Private Link origins, in Standard and Premium tiers. Front Door (classic) is closed to new resources and retires 31 March 2027.

Free CAPTCHA-replacement challenge for verifying human traffic, using non-interactive or managed challenges that adapt based on risk scoring, with a drop-in widget compatible with the reCAPTCHA API for easy migration

Machine-learning bot classification at the edge — scores every request 1-99 and exposes that to WAF rules. Distinguishes search-engine crawlers, scrapers, credential-stuffing tools, and headless browsers without breaking legitimate automation.

L7 web application firewall protecting against OWASP Top 10 risks with Cloudflare-managed rule sets, custom expression-based rules, exposed-credentials detection, rate-limiting integration, and machine-learning attack-score signals tuned across the global traffic graph

Web application and API protection with OWASP rule sets, bot management, API schema enforcement, and rate limiting — delivered at the CDN edge with a single configuration surface

Edge DDoS protection and web application firewall with managed rule sets for OWASP Top 10, adaptive bot protection, and reCAPTCHA Enterprise integration

Risk-scored bot and abuse protection for web and mobile traffic, providing a 0.0-1.0 risk score per request, account defender to detect account takeover, fraud-prevention signals for payment and bonus abuse, and password leak detection via k-anonymity hashing

Managed web application firewall with OWASP Top 10 rule sets, bot management, anti-crawler, CC (challenge-collapsar) attack mitigation, custom rule engine, and regional deployment with integrated DDoS protection

Edge delivery and security bundle powered by Cloudflare, offering DNS, global load balancing, WAF, DDoS protection, CDN, rate limiting, and Page Rules through a single IBM Cloud-native control plane

Layer-7 protection against OWASP Top 10 attacks (SQLi, XSS, RCE), bot traffic, and DDoS at the application layer. Edge-deployed for global protection or regional for backend-fronted apps.

L7 web application firewall protecting against OWASP Top 10 risks — SQL injection, XSS, command injection — with managed rule sets, custom rules, IP allow/block lists, and bot-detection heuristics tuned for OTC-hosted apps

Managed WAF with bot mitigation, IP / geo blocking, custom rules, and per-route challenges — runs on the edge before any function executes

Invisible CAPTCHA that verifies requests to high-value routes (checkout, sign-up, APIs) via a client-side challenge; optional Deep Analysis powered by Kasada uses machine learning to detect sophisticated bots