Wallarm

About the startup

Wallarm is a leading API security platform designed to protect APIs and AI-powered applications from modern threats with real-time detection, blocking, and comprehensive inventory. Core Features Discovery: Automatically detects API endpoints, parameters, shadow/orphan/zombie APIs, sensitive data exposure (like PII), and assigns risk scores via traffic analysis. Protection: Blocks OWASP Top 10/API Top 10 attacks, business logic abuse (BOLA), bots, credential stuffing, L7 DoS with rate limiting, and custom rules; supports inline/out-of-band modes. Response: Provides deep attack forensics, geoblocking (VPN/Tor), integrations (Slack, Splunk, Sentinel), virtual patching, and SOC-as-a-service. Testing: Passive vulnerability scanning from traffic, Threat Replay Testing (TRT), Schema-Based Testing (SBT/DAST), and API Attack Surface Management (AASM). How It Works Wallarm uses a filtering node (edge or self-hosted) to analyze traffic between the internet and your APIs, sending metrics to the Wallarm Cloud for processing, rule compilation, vulnerability scanning, and API inventory building. Cloud instances available in US and EU; deployment options: Security Edge (fully managed), Hybrid, or On-Premise. Company Details Headquartered in San Francisco, California, Wallarm was founded in 2013 and backed by investors like Toba Capital, Y Combinator, and Partech. Recognized in 2025 Inc. 5000 for rapid growth; focuses on fast deployment without heavy human investment.