Best Enterprise API Security Tools

How Many API Security Tools Products Does G2 Track?

Total Products under this Category: 77

Category Stats (Nov 2026)

  • Average Rating: 4.57/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Total Uptime (+1.01%) - Among all products in this category, Total Uptime recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank API Security Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,600+ Authentic Reviews
  • 77+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for API Security Tools

G2 Grid® for API Security Tools plotting products by satisfaction and market presence

Highlighted products: Postman, Cloudflare Application Security and Performance, Orca Security, Rakuten SixthSense Observability, Harness Platform, apisec.ai, Check Point WAF (formerly CloudGuard WAF), and Cequence Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/api-security/grids.json?focus%5B%5D=postman&focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=orca-security&focus%5B%5D=rakuten-sixthsense-observability&focus%5B%5D=harness-platform&focus%5B%5D=apisec-ai&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=cequence-security&segment=enterprise)

Postman

Postman is the world’s leading API platform, used by more than 40 million developers and 500,000 organizations to build, test, and manage APIs at scale. With Postman, teams collaborate efficiently across the entire API lifecycle, including design, development, testing, security, documentation, and governance. The platform helps ensure consistency, quality, and enterprise-grade control. Postman also offers Agent Mode (beta), built on AWS Bedrock and trained with AWS SageMaker. Agent Mode enables developers to use natural language to debug requests, organize collections, document APIs, and automate workflows without switching tools or writing custom scripts.

Average Rating: 4.6/5.0

Total Reviews: 1,757

How Do G2 Users Rate Postman?

  • API Testing: 9.5/10 (Category avg: 9.1/10)
  • API Monitoring: 9.1/10 (Category avg: 8.9/10)

Who Is the Company Behind Postman?

  • Seller: Postman
  • Year Founded: 2014
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    3,580 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 39% Medium, 35% Small

What Do G2 Reviewers Say About Postman?

AI-generated summary from verified user reviews

Pros
  • Users find Postman very easy to use, simplifying API testing and enhancing collaboration with a user-friendly interface.
  • Users find Postman to make API testing simple and efficient, enhancing collaboration and organization for teams.
  • Users appreciate the simplicity and efficiency of Postman for seamless API testing and collaboration within teams.
  • Users value the simplicity and efficiency of Postman for quick and organized API testing, enhancing teamwork and productivity.
  • Users find Postman to greatly enhance testing efficiency, streamlining API testing and promoting effective collaboration.
Cons
  • Users experience slow performance with Postman, particularly when managing multiple requests and collections.
  • Users experience performance issues with Postman, particularly slowdowns when handling large collections and multiple requests.
  • Users experience slow loading issues with Postman, especially when managing multiple requests and large collections.
  • Users experience resource limitations with Postman, noting high CPU/RAM usage and slow performance with large collections.
  • Users often find Postman has limited features in the free version, restricting their ability to fully utilize the tool.

What Are Recent G2 Reviews of Postman?

What Are G2 Users Discussing About Postman?

Cloudflare Application Security and Performance

Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best.

Average Rating: 4.5/5.0

Total Reviews: 783

How Do G2 Users Rate Cloudflare Application Security and Performance?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 9.7/10 (Category avg: 8.9/10)

Who Is the Company Behind Cloudflare Application Security and Performance?

  • Seller: Cloudflare, Inc.
  • Company Website:
  • Year Founded: 2009
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    8,094 employees on LinkedIn®
  • Ownership: NYSE: NET

Who Uses This Product?

  • Who Uses This: Web Developer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 62% Small, 27% Medium

What Do G2 Reviewers Say About Cloudflare Application Security and Performance?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the strong security features of Cloudflare Application Security and Performance, enhancing protection against threats effectively.
  • Users appreciate the ease of use of Cloudflare, enjoying its intuitive dashboard and straightforward setup process.
  • Users appreciate the combination of security and performance in Cloudflare, enhancing site speed and protection effortlessly.
  • Users value the combined security and performance features of Cloudflare, enhancing site speed and protection effortlessly.
  • Users value the reliable security and performance of Cloudflare, offering peace of mind and improved website management.
Cons
  • Users find the complex user interface daunting, especially for advanced configurations and navigating powerful features.
  • Users find Cloudflare's services expensive due to advanced features being restricted to higher-tier plans.
  • Users find the complex setup challenging, especially new users navigating advanced configurations and limited feature access.
  • Users find the complexity of configuration challenging, especially when navigating advanced features and pricing options.
  • Users find the learning curve challenging, particularly with complex configurations and limitations on advanced features for new users.

What Are Recent G2 Reviews of Cloudflare Application Security and Performance?

What Are G2 Users Discussing About Cloudflare Application Security and Performance?

Orca Security

Orca Security delivers security for the companies that build. As cloud, applications, AI and app generation expand the attack surface, Orca transforms security risk into the context teams need to act. The Orca Platform provides complete visibility across cloud, AI, and application environments, correlates risk across every layer, and prioritizes the exposures that matter most so organizations can remediate faster and innovate with confidence. Trusted by hundreds of organizations, including SAP, Autodesk, Gannett, Lemonade, and Digital Turbine, Orca is backed by leading investors including Temasek, CapitalG, ICONIQ Capital, and Redpoint Ventures.

Average Rating: 4.7/5.0

Total Reviews: 314

How Do G2 Users Rate Orca Security?

  • API Testing: 7.5/10 (Category avg: 9.1/10)
  • API Monitoring: 8.5/10 (Category avg: 8.9/10)

Who Is the Company Behind Orca Security?

  • Seller: Orca Security
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Portland, Oregon
  • LinkedIn® Page: www.linkedin.com
    523 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer, Senior Security Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 54% Large, 36% Medium

What Do G2 Reviewers Say About Orca Security?

AI-generated summary from verified user reviews

Pros
  • Users find Orca Security to have a user-friendly interface, making navigation and onboarding exceptionally easy.
  • Users appreciate the rich features and integrations of Orca Security, enhancing visibility and responsiveness to needs.
  • Users value the comprehensive security features of Orca Security, enjoying full visibility and easy implementation.
  • Users appreciate the user-friendly interface of Orca Security, making navigation and integration seamless and straightforward.
  • Users appreciate the enhanced visibility of Orca Security, benefiting from better attack path insights and data posture updates.
Cons
  • Users note significant improvement needed in reporting capabilities and quality of vulnerability validations within Orca Security.
  • Users find feature limitations in Orca Security, citing issues with scheduled reporting and lack of customization options.
  • Users express frustration with the limited features of Orca Security, affecting usability and customization options.
  • Users express dissatisfaction with missing features, such as a cached dashboard and an endpoint agent for non-cloud devices.
  • Users experience ineffective alerts from Orca Security, leading to alert fatigue and missed vulnerabilities in dynamic environments.

What Are Recent G2 Reviews of Orca Security?

What Are G2 Users Discussing About Orca Security?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Rakuten SixthSense Observability

In today's digital landscape, businesses need a powerful and comprehensive Application Performance Monitoring (APM) solution to stay ahead of the curve. Introducing Rakuten SixthSense Observability - a next-generation APM tool that transforms the way you monitor, analyze, and optimize your applications and infrastructure. With its robust suite of features and advanced analytics, Rakuten SixthSense Observability empowers you to proactively identify and resolve issues, streamline operations, and enhance customer experiences. Key Capabilities: • Comprehensive Monitoring and Alerting: Rakuten SixthSense Observability offers end-to-end monitoring of your applications, infrastructure, and network performance. With real-time alerting and customizable dashboards, you can quickly detect issues and gain actionable insights into the health and performance of your systems. • Distributed Tracing and Correlation: Gain full visibility into your application's performance with distributed tracing, which tracks transactions and requests across multiple services and components. This feature helps you identify bottlenecks, latency issues, and errors, making it easier to optimize your application and enhance customer experiences. • Anomaly Detection and Machine Learning: Leverage Rakuten SixthSense's advanced machine learning capabilities to automatically identify unusual patterns and deviations in application performance and resource utilization. This proactive approach enables you to detect and resolve issues before they impact your business and customers. • Advanced Analytics and Visualization: Rakuten SixthSense's rich data visualization and analytics tools allow you to dive deep into your application performance data. Generate custom reports, analyze trends, and uncover hidden patterns that can drive continuous improvement and optimization. • Log Management and Integration: Effortlessly collect, analyze, and store logs from various sources with Rakuten SixthSense's integrated log management feature. This seamless integration enables you to correlate log data with performance metrics and traces, providing a comprehensive understanding of your application's behaviour. • Scalability and Flexibility: Rakuten SixthSense Observability is built to scale with your growing business needs, supporting a wide range of applications, services, and infrastructure. Its flexible architecture allows you to customize the tool to your specific requirements and integrate it with other monitoring and observability solutions. Current Feature set: • Application Performance Monitoring: Full stack visibility across Java, PHP, Node.js, Python, Go and a lot more! Key Features include, Distributed Tracing, Profiling, Database Monitoring • Infrastructure Monitoring: Get a birds-eye view of your infrastructure health and gain granular insights with easy deployment Key Features include Kubernetes, VMs, Web Servers, Cloud Integrations • Digital Experience Monitoring: Improve the end-user experience of your applications mapped with contextual information of application performance metrics • Browser Monitoring: Metrics to optimize end users’ experience and help in improving application performance. • Mobile Monitoring: Monitor crashes, performance & usage metrics for your mobile applications • Synthetic Monitoring: Stimulate end-user transactions using low code, no code test scripts • VM Monitoring: VM monitoring capability lets you view your infrastructure performance and health of servers, virtual machines, containers, databases etc. at a glance. • SixthSense Cognitive Engine: Modern observability and the proactive approach using artificial intelligence. The application uses different AI/ML algorithms that can predict performance metrics with an accuracy of up to 98% and a confidence level of 90%.

Average Rating: 4.6/5.0

Total Reviews: 52

How Do G2 Users Rate Rakuten SixthSense Observability?

  • API Testing: 9.3/10 (Category avg: 9.1/10)
  • API Monitoring: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Rakuten SixthSense Observability?

Who Uses This Product?

  • Who Uses This: Senior Software Engineer
  • Top Industries: Information Technology and Services, Computer Games
  • Company Size: 47% Large, 38% Medium

What Do G2 Reviewers Say About Rakuten SixthSense Observability?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the deep visibility offered by Rakuten SixthSense, enhancing application performance and proactively managing issues.
  • Users value the effective alerting system for seamless monitoring and quick resolution of issues in one dashboard.
  • Users value the excellent customer support of Rakuten SixthSense, enhancing their overall experience and productivity.
  • Users appreciate the ease of use of Rakuten SixthSense Observability, enabling quick identification of issues without hassle.
  • Users find the implementation ease of Rakuten SixthSense Observability impressive, allowing quick access to essential monitoring tools.
Cons
  • Users find the complex setup of Rakuten SixthSense Observability requires significant onboarding effort for optimal use.
  • Users find the documentation lacking, making onboarding and setup more challenging than necessary.
  • Users often face false positive alerts and desire better functionality for error monitoring and dashboard notifications.
  • Users report experiencing inefficient alerts, citing false positives and a lack of preferred error record displays.
  • Users note that the documentation needs improvement, which impacts their ability to utilize the tool effectively.

What Are Recent G2 Reviews of Rakuten SixthSense Observability?

apisec.ai

APIsec automated API testing platform automatically analyzes applications, simulates sophisticated attacks across the full spectrum of OWASP threats, and uncovers vulnerabilities and exploits before they reach production. By eliminating the need for time-consuming manual testing, APIsec helps security and development teams strengthen their security posture with continuous, preventative API protection. In addition, APIsec operates APIsec University, the world’s most popular API security education platform, offering dozens of free courses and a vibrant community of over 100,000 members. Together, our advanced security solutions and educational resources enable organizations to build, deploy, and maintain secure applications with confidence.

Average Rating: 4.7/5.0

Total Reviews: 227

How Do G2 Users Rate apisec.ai?

  • API Testing: 9.0/10 (Category avg: 9.1/10)
  • API Monitoring: 8.7/10 (Category avg: 8.9/10)

Who Is the Company Behind apisec.ai?

  • Seller: apisec.ai
  • Year Founded: 2018
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    41 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Consultant, Cyber Security Analyst
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 64% Small, 23% Medium

What Do G2 Reviewers Say About apisec.ai?

AI-generated summary from verified user reviews

Pros
  • Users praise apisec.ai's simplicity and effectiveness, finding it invaluable for enhancing API security effortlessly.
  • Users appreciate the ease of use with apisec.ai, finding its tools intuitive and setup seamless for API security testing.
  • Users appreciate the practical, hands-on approach of apisec.ai, making API security accessible for all professionals.
  • Users value the testing efficiency of APIsec.ai, enabling swift identification and resolution of API vulnerabilities.
  • Users love the automation of APIsec.ai, enjoying effortless scanning and time-saving features for multiple projects.
Cons
  • Users face challenges with API issues due to agent installation requirements and limited documentation hindering flexibility and understanding.
  • Users find the complex setup of apisec.ai time-consuming, often needing additional support for configuration.
  • Users express concerns about poor documentation, which hampers effective onboarding and understanding of advanced features.
  • Users face a difficult learning curve for APIsec.ai, particularly with customization and lack of comprehensive documentation.
  • Users feel the pricing is too high, expressing a desire for more affordable learning resources and options.

What Are Recent G2 Reviews of apisec.ai?

Harness Platform

Simplify your developer experience with the world's first AI-augmented software delivery platform. Upgrade your software delivery with Harness' innovative CI/CD, Feature Flags, Infrastructure as Code Management, and Chaos Engineering tools. We are a software delivery platform that helps developers and infrastructure engineers build and ship code for cloud and on-premise projects. We automate the continuous integration and continuous delivery (CI/CD) process to help teams build faster, ship more frequently, and improve quality, efficiency, and governance. We help companies in four key areas: Number one, we accelerate innovation through DevOps modernization. We provide an approach for software delivery that automates processes, reduces manual interventions, consolidates tools, and accelerates time-to-market for new products, features, and fixes. Number two, we improve developer experience. We give you the ability to attract, retain, and onboard high-caliber engineering talent while fostering a culture of continuous innovation and improvement. Number three, we secure software delivery. We give you the ability to integrate security into every phase of the SDLC. And last but not least is, we optimize cloud costs. We give you the ability to eliminate waste and to ensure that appropriate cloud resources are allocated at the right place at the right time.

Average Rating: 4.6/5.0

Total Reviews: 330

How Do G2 Users Rate Harness Platform?

  • API Testing: 8.9/10 (Category avg: 9.1/10)
  • API Monitoring: 9.8/10 (Category avg: 8.9/10)

Who Is the Company Behind Harness Platform?

  • Seller: Harness
  • Company Website:
  • Year Founded: 2018
  • HQ Location: San Francisco
  • LinkedIn® Page: www.linkedin.com
    1,832 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Senior Software Engineer
  • Top Industries: Computer Software, Financial Services
  • Company Size: 41% Large, 40% Medium

What Do G2 Reviewers Say About Harness Platform?

AI-generated summary from verified user reviews

Pros
  • Users find Harness Platform to be easy to use, significantly streamlining deployment management and integrations.
  • Users value the comprehensive features of Harness Platform, facilitating efficient workflows across various DevOps processes.
  • Users value the ease of deploying and testing features with Harness Platform, enhancing workflow and control over experiments.
  • Users appreciate the easy setup of Harness Platform, enabling quick integrations and streamlined workflows for efficient deployment.
  • Users value the easy integrations of the Harness Platform, enhancing their efficiency and adaptability in CI/CD workflows.
Cons
  • Users notice that some essential features are missing from Harness Platform, affecting overall functionality and support.
  • Users find the features immature and desire greater control over data granularity in the Harness Platform.
  • Users find that some features are underdeveloped and essential options are missing, affecting overall satisfaction with Harness Platform.
  • Users find the steep learning curve challenging, especially when adjusting to the platform's numerous features and settings.
  • Users express frustration with the poor UI of Harness Platform, citing clutter and slow navigation as major issues.

What Are Recent G2 Reviews of Harness Platform?

What Are G2 Users Discussing About Harness Platform?

Check Point WAF (formerly CloudGuard WAF)

CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment.

Average Rating: 4.3/5.0

Total Reviews: 90

How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 9.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)?

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 58% Medium, 27% Small

What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)?

AI-generated summary from verified user reviews

Pros
  • Users value the robust protection offered by Check Point WAF against various attacks, ensuring their applications' security effortlessly.
  • Users value the robust security of Check Point CloudGuard WAF, providing effortless protection against threats without expert knowledge.
  • Users value the strong automatic protection of Check Point WAF against threats like SQL injection and DDoS attacks.
  • Users value the proactive DDoS protection of Check Point CloudGuard WAF, effectively shielding sites from various attacks.
  • Users appreciate the strong automatic protection of Check Point WAF, ensuring security without extensive manual configuration.
Cons
  • Users find the complex setup of CloudGuard WAF frustrating, often taking more time than expected to configure effectively.
  • Users find the pricing of Check Point WAF to be premium, which may deter some potential customers.
  • Users note a steep learning curve for Check Point WAF, making initial setup and tuning time-consuming and complex.
  • Users struggle with the difficult learning curve of Check Point WAF, finding initial setup and tuning quite complex.
  • Users note that the poor documentation complicates onboarding and makes advanced configurations challenging to navigate.

What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)?

Cequence Security

Cequence protects the applications and data that power enterprises in the agentic era. More than a decade of bot defense and API security experience has established Cequence as the leader of safe and secure agentic AI adoption. The Cequence platform delivers deep insight into user, entity, and agent behavior, enabling organizations to secure and control agentic AI workflows while protecting against bad actors and rogue agents. Cequence delivers value in minutes rather than days or weeks with a highly scalable, no-code approach. Trusted by the largest and most demanding private and public sector organizations, Cequence protects more than 10 billion daily API interactions and 4 billion user accounts. Cequence AI Gateway – Containment for Agentic AI Workflows The Cequence AI Gateway provides the discovery, governance, and security required to contain agentic AI workflows, delivering complete runtime agent containment for scalable, enterprise-wide deployment. Built-in governance and guardrails constrain agent behavior using capabilities that include least privilege access and protection against prompt injection and sensitive data loss. The AI Gateway’s agentic zero trust architecture enables enterprises to confidently deploy agentic workflows for internal productivity and customer-facing experiences. Bot Management – Bot Detection, Mitigation, and Fraud Prevention Cequence Bot Management protects organizations from the full range of automated attacks to prevent data loss, theft, and fraud. Bot Management is network based, requiring no agents, JavaScript, or SDKs. Behavioral fingerprints and multi-dimensional analytics provide a deep understanding of business context to identify and natively block attacks in real time. It mitigates a wide variety of cyberattacks including business logic attacks, exploits, automated bot activity, online fraud, and OWASP API Security Top 10 threats. API Security – API Security Posture Management Cequence API Security discovers, monitors, and tests enterprise APIs to assess and remediate risks and API coding errors that can lead to compliance and governance issues, data loss, and business disruption. Providing complete visibility and monitoring of internal, external, and third-party APIs, Cequence uncovers sensitive data exposure, tests pre-production and runtime APIs against specifications, and identifies OWASP API Security Top 10 vulnerabilities. A built-in AI Assistant and MCP server allow teams of all skill levels to effectively use the product through plain-language prompts. API Security includes over 200 pre-built risk rules mapped to more than 25 global frameworks including every version of the OWASP API Security Top 10, PCI DSS, GDPR, and NIST CSF.

Average Rating: 4.6/5.0

Total Reviews: 55

How Do G2 Users Rate Cequence Security?

  • API Testing: 8.4/10 (Category avg: 9.1/10)
  • API Monitoring: 9.2/10 (Category avg: 8.9/10)

Who Is the Company Behind Cequence Security?

  • Seller: Cequence Security
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Santa Clara, CA
  • LinkedIn® Page: www.linkedin.com
    155 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Telecommunications, Information Technology and Services
  • Company Size: 40% Small, 35% Large

What Do G2 Reviewers Say About Cequence Security?

AI-generated summary from verified user reviews

Pros
  • Users praise Cequence Security for its top-tier API protection and advanced bot defense, ensuring robust security for digital services.
  • Users value Cequence Security for its powerful bot detection and mitigation, enhancing overall protection and visibility for APIs.
  • Users appreciate the visibility and robust security provided by Cequence, enhancing protection against sophisticated automated attacks.
  • Users commend Cequence Security for its quick and knowledgeable customer support, enhancing overall user experience and satisfaction.
  • Users value the time-saving automation of Cequence Security, freeing up their SOC team from manual threat management.
Cons
  • Users find the complex setup of Cequence Security requires significant technical knowledge, impacting the initial implementation process.
  • Users face a difficult learning curve with Cequence Security, requiring significant time and expertise for optimal setup.
  • Users experience slow performance with Cequence Security, especially during large data queries and incident response delays.
  • Users experience dashboard performance issues during large queries, leading to slower response times and decision-making delays.
  • Users report detection issues with Cequence Security, struggling to fine-tune settings for specific or uncommon threats.

What Are Recent G2 Reviews of Cequence Security?

What Are G2 Users Discussing About Cequence Security?

Tenable Nessus

Built for security practitioners, by security professionals, Nessus products by Tenable are the de-facto industry standard for vulnerability assessment. Nessus performs point-in-time assessments to help security professionals quickly and easily identify and fix vulnerabilities, including software flaws, missing patches, malware, and misconfigurations - across a variety of operating systems, devices, and applications. With features such as pre-built policies and templates, customizable reporting, group “snooze” functionality, and real-time updates, Nessus is designed to make vulnerability assessment simple, easy, and intuitive. The result: less time and effort to assess, prioritize, and remediate issues.

Average Rating: 4.5/5.0

Total Reviews: 306

Who Is the Company Behind Tenable Nessus?

  • Seller: Tenable
  • Company Website:
  • HQ Location: Columbia, MD
  • LinkedIn® Page: www.linkedin.com
    2,361 employees on LinkedIn®
  • Ownership: NASDAQ: TENB

Who Uses This Product?

  • Who Uses This: Security Engineer, Network Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 41% Medium, 33% Large

What Do G2 Reviewers Say About Tenable Nessus?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the comprehensive and accurate vulnerability detection of Tenable Nessus, enabling efficient management of network security.
  • Users value the high accuracy in vulnerability detection provided by Tenable Nessus, enabling effective risk management.
  • Users praise the high accuracy of automated scanning in Tenable Nessus, enhancing vulnerability management efficiently.
  • Users find the intuitive interface of Tenable Nessus easy to navigate, enhancing their overall user experience.
  • Users appreciate the high accuracy and extensive plugin support of Tenable Nessus for effective vulnerability scanning.
Cons
  • Users find the slow scanning times can disrupt production, often lasting days depending on the environment.
  • Users find the cost of Tenable Nessus to be excessively high, impacting both maintenance and accessibility.
  • Users note limited features in Tenable Nessus, impacting user experience and requiring additional tools for full functionality.
  • Users express concerns about the complexity of Tenable Nessus, noting a steep learning curve and high operational costs.
  • Users experience false positives, occasionally identifying incorrect vulnerabilities, including issues with some Windows patch updates.

What Are Recent G2 Reviews of Tenable Nessus?

What Are G2 Users Discussing About Tenable Nessus?

Invicti

Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while dramatically reducing the risk of attack. Combining advanced DAST and IAST capabilities in a single platform, Invicti enables security teams to continuously identify, prioritize, and remediate vulnerabilities across complex modern environments with confidence and automation. With Invicti, security teams can: - Automate application security testing workflows and save hundreds of hours every month - Discover and secure all web applications and APIs, including forgotten, unmanaged, and shadow assets - Deliver actionable, developer-friendly feedback that helps teams remediate vulnerabilities faster and build more secure code over time - Reduce false positives with proof-based scanning technology that validates exploitable vulnerabilities - Scale application security programs across large enterprises without slowing development teams - Integrate security seamlessly into existing DevSecOps and CI/CD workflows Built for organizations with the most demanding security requirements, Invicti empowers teams to confidently secure their entire attack surface with accuracy, scalability, and automation.

Average Rating: 4.5/5.0

Total Reviews: 69

How Do G2 Users Rate Invicti?

  • API Testing: 8.8/10 (Category avg: 9.1/10)

Who Is the Company Behind Invicti?

  • Seller: Invicti Security
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Austin, Texas
  • LinkedIn® Page: www.linkedin.com
    326 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 46% Large, 29% Medium

What Do G2 Reviewers Say About Invicti?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Invicti, highlighting its quick setup and straightforward report generation.
  • Users value the effective scanning technology of Invicti, enabling accurate identification of vulnerabilities and streamlined workflows.
  • Users value the accuracy and integration capabilities of Invicti, enhancing efficiency and simplifying reporting processes.
  • Users appreciate the well-formatted and easy-to-read reports from Invicti, simplifying certification processes significantly.
  • Users value the super accurate vulnerability detection of Invicti, enhancing their security workflows efficiently.
Cons
  • Users find the customer support inadequate, struggling with timely responses and effective solutions to issues.
  • Users experience slow performance during scans and setup, which affects their overall satisfaction with Invicti.
  • Users experience slow scanning issues with Invicti, affecting efficiency despite good support and solid performance once set up.
  • Users face API scanning issues with Invicti, limiting its effectiveness for their specific needs despite good support.
  • Users find the complex setup to be overwhelming initially, impacting the ease of using Invicti effectively.

What Are Recent G2 Reviews of Invicti?

What Are G2 Users Discussing About Invicti?

StackHawk

StackHawk is reimagining AppSec for AI-driven development, where applications are built faster than traditional AppSec tools can keep up. Our AppSec Intelligence Platform combines scalable runtime testing with complete attack surface discovery from source code. We integrate directly into development workflows and provide context-aware remediations to developers, enabling teams to find and fix exploitable vulnerabilities before they reach production. With real-time visibility and centralized program intelligence, AppSec teams can prioritize testing and fixing what matters. Companies like British Airways, ITV, and Norstella trust StackHawk to evaluate application risk, prove program value, and scale testing coverage to match development velocity.

Average Rating: 4.6/5.0

Total Reviews: 67

How Do G2 Users Rate StackHawk?

  • API Testing: 8.9/10 (Category avg: 9.1/10)
  • API Monitoring: 9.1/10 (Category avg: 8.9/10)

Who Is the Company Behind StackHawk?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 46% Small, 35% Medium

What Do G2 Reviewers Say About StackHawk?

AI-generated summary from verified user reviews

Pros
  • Users value the easy integrations of StackHawk, which streamline workflows and enhance collaboration across development teams.
  • Users commend the exceptional customer support from StackHawk, highlighting their friendly assistance and effective onboarding process.
  • Users find StackHawk to be easy to use, especially after the initial setup, enhancing their security testing experience.
  • Users value the seamless integrations with various tools, making automated security testing straightforward and efficient.
  • Users praise StackHawk for its scanning efficiency, boosting development speed while enhancing security integration seamlessly.
Cons
  • Users find the setup complexity of StackHawk challenging, requiring extensive trial and error for configuration.
  • Users find the complex setup of StackHawk frustrating due to unclear documentation and extensive configuration requirements.
  • Users find the high learning curve of StackHawk challenging, hindered by its complex setup and limited training resources.
  • Users point out the lack of features in StackHawk, especially regarding API management and vulnerability tracking.
  • Users note the limited scope of StackHawk, citing issues with on-prem use and insufficient reporting capabilities.

What Are Recent G2 Reviews of StackHawk?

What Are G2 Users Discussing About StackHawk?

Pynt - API Security Testing

Pynt is an innovative API Security Testing platform exposing verified API threats through simulated attacks. Hundreds of companies rely on Pynt to continuously monitor, classify and attack poorly secured APIs, before hackers do.

Average Rating: 4.8/5.0

Total Reviews: 44

How Do G2 Users Rate Pynt - API Security Testing?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 8.8/10 (Category avg: 8.9/10)

Who Is the Company Behind Pynt - API Security Testing?

  • Seller: Pynt
  • Year Founded: 2022
  • HQ Location: Tel Aviv, IL
  • LinkedIn® Page: www.linkedin.com
    13 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Computer & Network Security
  • Company Size: 57% Small, 23% Large

What Do G2 Reviewers Say About Pynt - API Security Testing?

AI-generated summary from verified user reviews

Pros
  • Users value Pynt for its efficient vulnerability detection, quickly uncovering critical security issues in APIs.
  • Users appreciate Pynt for its effective security engine, quickly identifying critical issues and boosting confidence in API security.
  • Users appreciate the seamless integration of Pynt with their SDLC, enhancing API discovery and security automation.
  • Users appreciate the simple integration of Pynt with their SDLC, enhancing their API security workflow effortlessly.
  • Users value the automation capabilities of Pynt, as it simplifies API security testing and enhances confidence in their systems.
Cons
  • Users find the complex setup challenging initially, requiring time and effort to fully integrate Pynt effectively.
  • Users find the setup complexity of Pynt challenging, often requiring support to navigate the initial process.
  • Users note the limited features of Pynt, particularly in reporting and onboarding, which can hinder functionality.
  • Users find the user interface challenging, making it difficult to navigate and set up the software effectively.
  • Users find the user interface challenging, suggesting significant improvements for a better overall experience.

What Are Recent G2 Reviews of Pynt - API Security Testing?

Salt Security

Salt Security protects the APIs that form the core of every modern application. Its patented API Protection Platform is the only API security solution that combines the power of cloud-scale big data and time-tested ML/AI to detect and prevent API attacks. By correlating activities across millions of APIs and users over time, Salt delivers deep context with real-time analysis and continuous insights for API discovery, attack prevention, and shift-left practices. Deployed in minutes and seamlessly integrated within existing systems, the Salt Security platform gives customers immediate value and protection, so they can innovate with confidence and accelerate their digital transformation initiatives. Salt protects APIs across their full lifecycle – build, deploy and runtime phases, utilizing cloud-scale big data combined with AI and ML to baseline millions of users and APIs. By delivering context-based insights across the entire API lifecycle, Salt enables users to detect the reconnaissance activity of bad actors and block them before they can reach their objective. Through its unique API Context Engine (ACE) architecture, the Salt platform provides design analysis in pre-production, discovers all APIs, pinpoints and stops API attackers, and provides remediation insights. Salt Security holds the only granted patent for using AI to identify and prevent API attacks and is the only solution that automatically and continuously discovers all APIs. This approach enables a complete and up-to-date inventory of all APIs. The Salt API security platform leads the market with the simplest, most comprehensive, and most effective API security offering. In its Series D round, Salt raised $140M at a valuation of $1.4 billion. Led by CapitalG, Alphabet's independent growth fund, the round included participation from all existing investors, including Sequoia Capital, Y Combinator, Tenaya Capital, S Capital VC, Advent International, Alkeon Capital, and DFJ Growth.

Average Rating: 4.7/5.0

Total Reviews: 12

How Do G2 Users Rate Salt Security?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Salt Security?

Who Uses This Product?

  • Company Size: 83% Large, 8% Medium

What Are Recent G2 Reviews of Salt Security?

What Are G2 Users Discussing About Salt Security?

Akto API Security Platform

Akto is a trusted platform for application security and product security teams to build an enterprise-grade API security program throughout their DevSecOps pipeline. Our industry-leading suite of — API discovery, API security posture management, sensitive data exposure, and API security testing solutions enables organizations to gain visibility in their API security posture. 1,000+ Application Security teams globally trust Akto for their API security needs. Akto use cases: 1. API Discovery 2. API Security Testing in CI/CD 3. API Security Posture Management 4. Authentication and Authorization Testing 5. Sensitive data Exposure 6. Shift left in DevSecOps

Average Rating: 4.5/5.0

Total Reviews: 54

How Do G2 Users Rate Akto API Security Platform?

  • API Testing: 8.8/10 (Category avg: 9.1/10)
  • API Monitoring: 9.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Akto API Security Platform?

  • Seller: Akto.io
  • Year Founded: 2022
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    29 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 44% Medium, 40% Small

What Do G2 Reviewers Say About Akto API Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly interface of Akto, finding the platform easy to navigate and manage projects.
  • Users praise Akto for its easy API security testing integration, seamlessly fitting into CI/CD pipelines and enhancing efficiency.
  • Users value the effortless integration of automation testing in Akto, enhancing efficiency within their CI/CD workflow.
  • Users praise Akto for its seamless integration with CI/CD pipelines, enhancing API security testing with minimal manual effort.
  • Users value the automated security testing capabilities of Akto API Security Platform, enhancing their API protection efforts.
Cons
  • Users find the complex initial setup challenging due to poor documentation and a steep learning curve.
  • Users find the documentation poor, making it challenging to configure advanced features effectively.
  • Users find that API issues hinder their experience, particularly due to a steep learning curve and complex configurations.
  • Users find the learning curve steep with Akto, especially for those unfamiliar with API security concepts and configurations.
  • Users find the setup complexity of Akto API Security Platform challenging due to poor documentation and steep learning curve.

What Are Recent G2 Reviews of Akto API Security Platform?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated
Reviews & FAQs

Reviews Summary: The Best API Security Software for Enterprise Businesses

Thanks to 5204 API Security software reviews and associated data from users working for large-scale companies, at G2 we have some of the most definitive data on the best API Security software for the large space. We have identified 14 individual API Security products offering the features, pricing and support that Enterprise companies look for when comparing API Security software and solutions. These reviews are generated using the qualitative and quantitative feedback from G2 members working in large-scale companies and who have used these API Security software products.

When G2 reviewers submit their API Security software reviews, they often provide information on the type of company they work for and what market segment they belong to. We break these different market segments into three distinct groups:

  • Small Business API Security Software Reviews (< 50 employees)
  • large API Security Software Reviews (51-1,000 employees)
  • Enterprise API Security Software Reviews (1,001+ employees)

large businesses have their own unique requirements when it comes to API Security software compared to small or enterprise companies. That is why these individual large-scale company API Security software reviews are especially helpful when comparing product set up, ease of use and overall cost.

Below you will find FAQs and review snippets for API Security software products that work well in large environments. These reviews are written by real G2 users working for these Enterprise companies who have real-world experience with these API Security software products.

FAQs About API Security Software for Enterprise Businesses

Q. What are the best API Security software products for large-scale businesses, according to G2 reviewers?
  • Postman - 4.7-stars, 351 reviews (30% from large reviewers)
  • Cloudflare Application Security and Performance - 4.4-stars, 23 reviews (12% from large reviewers)
  • Orca Security - 4.7-stars, 33 reviews (53% from large reviewers)
  • Rakuten SixthSense Observability - 4.4-stars, 12 reviews (50% from large reviewers)
  • apisec.ai - 4.7-stars, 31 reviews (14% from large reviewers)
Q. What are the least-liked API Security software products for professionals at large-scale companies, based on the overall G2 rating?
  • Akto API Security Platform - 4.7-stars, 10 reviews (20% from large reviewers)
  • Salt Security - 4.7-stars, 10 reviews (83% from large reviewers)
  • Pynt - API Security Testing - 4.9-stars, 10 reviews (25% from large reviewers)
  • StackHawk - 4.5-stars, 10 reviews (26% from large reviewers)
  • Invicti - 4.6-stars, 17 reviews (49% from large reviewers)
Q. What are the highest-rated API Security software tool features according to employees at Enterprise companies?
  • API Monitoring - 4.6-stars
  • API Discovery - 4.6-stars
  • API Verification - 4.4-stars
Q. What are the features that are rated lowest by employees at Enterprise companies?
  • Bot Detection - 4.1-stars
  • Change Management - 4.2-stars
  • Compliance Monitoring - 4.3-stars
Q. How many API Security software reviews are from users working in large companies?

633 out of all API Security software reviews on G2 are from users working in Enterprise companies (12%).

Here's What Reviewers Working at large Businesses Have to Say About API Security Software

What Enterprise Professionals Liked What Enterprise Professionals Disliked

Postman: “The postman application provides collections, history, creation of api and a runner. This helps in creating mock server, monitoring and documentation.”

Read Review

Postman: “For me, the learning curve. I'm trying to learn to use API with a database and it is just very new to me.”

Read Review

Postman: “Repeatable tests can be run in a sequential order without needing to write a script in a programming language and are easily imported and exported and results are logged for each test run and the resource utilization in the machine is low so several instances can be run in parallel. The collection runner has easily saved me half of my work week for the last 2 years giving me more free time to actually code since the tests are run so easily.”

Read Review

Harness Platform: “There is no support for non-Linux platforms, and build tools are not very customizable. Build configuration is kept separate from your code, which can make things difficult when working in a large team, unless you restrict yourself to a single person with administrative privileges.”

Read Review

Postman: “Most of my job is making sure that valid queries work as expected and invalid ones are rejected and don't break havoc by producing unexpected effects and that the right error messages are displayed so people can correct the query as necessary and that requires a lot of testing and most of it can be done thru postman.”

Read Review

Postman: “I have no criticism of the product Navigating through the app can be a bit difficult for beginner users I have no criticism of the product”

Read Review
Recommendations To Others Problems Solved & Benefits

Postman: “Yes I would definitely recommend this product”

Read Review

Cloudflare Application Security and Performance: “It helps to protect our applications from attacks & unwanted traffic while keeping performance stable. It also makes monitoring and managing security easier for our team.”

Read Review

Postman: “There is no reason not to try it, because it is free to try, and the free version will probably meet most needs.”

Read Review

Azion: “Web publication delivery and security against cyber attacks”

Read Review

Postman: “It has too many uses, take them the most also the documentation about the tool is very good”

Read Review

Postman: “Postman help me with API testing and debugging much easier by allowing me to quickly send requests, check responses, and identify issues without depending on the UI. It helps me validate API functionality, test different scenarios and payloads, troubleshoot errors, and verify backend changes efficiently. It also makes it easier to organize requests and maintain reusable test collections.”

Read Review