Wallarm WAAP

What it does

Wallarm WAAP is a cloud-native Web Application and API Protection (WAAP) platform that blocks OWASP Top 10 web attacks, OWASP API Top 10 threats such as broken object-level authorization, malicious bots, account takeover, and application-layer DDoS from a single inline engine. Detection is behavior-based rather than signature-based: the engine analyzes request and session behavior instead of pattern-matching attack strings, removing the signature tuning, allowlist maintenance, and false-positive triage that keep legacy WAFs in monitor mode.

How it works

The platform deploys inline in about 15 minutes as NGINX or Envoy modules, a Kubernetes Ingress controller or Envoy sidecar, Kong and MuleSoft connectors, or through Security Edge, a DNS-routed deployment on Wallarm's distributed network; out-of-band analysis via eBPF is also supported, with one console across AWS, GCP, Azure, IBM Cloud, and private data centers. The engine automatically selects single-request, session, or IP blocking to match the attack pattern, applies distributed rate limiting and geographic blocking, and virtual-patches 0-day vulnerabilities, with detections updating as Wallarm Research analyzes new attack patterns. Events push to SIEM, incident response, and messaging tools.

Credentials and traction

SOC 2 Type II certified, with a 99.95 percent monthly uptime commitment on standard subscription plans. Wallarm is listed as a Representative Vendor in the 2026 Gartner Market Guide for Cloud Web Application and API Protection for its Cloud-Native WAAP offering, was named to the 2025 Inc. 5000 list of fastest-growing US companies, and protects billions of API requests daily. Customers include Panasonic, Dropbox, Miro, Victoria's Secret, and Rappi.