Ammune™ Actively Protects APIs in Real Time

Securing APIs Inline with the Highest Level of Accuracy, Against the Most Advanced Cyber Attacks, on Cloud & On-Premise

inline

Automated

Accurate

Ammune™ is a Fully Automated AI-Based API Security Solution

“With its unique approach to analyzing traffic, leveraged by its groundbreaking technology that delivers distinct competitive advantages, L7 Defense received Frost & Sullivan’s 2020 Global Product Leadership Award for its fully autonomous AI-based machine leaning API security solution”

Product Leadership | Award 2020

Inline, Highly Accurate Protection

Identifying malicious traffic at a very high precision in real time, utilizing advanced AI/ML technology

Out-of-the-Box Automated Solution

Plug & Play solution that starts protecting APIs and Apps immediately after its deployment, with almost no need for human intervention along time

Cloud Native Solution with Inherent Elastic Scalability

Scalable container-based native cloud solution, which is also easy to deploy at private datacenters, with optional high-availability cluster configuration

Zero Trust
by Design

Performing full DPI of HTTP/s traffic (requests and response) at API resolution as part of the overall AI/ML traffic analysis, assuming that all traffic is potentially malicious

Ammune™ is a Fully Automated AI-Based API Security Solution

API-WAF

The API-WAF module protects APIs from malicious content-based (“classical”) attacks that appear in the “OWASP Top 10” – APIs and Applications security lists.
Performing in real time, the module conducts full deep packet inspection (DPI), followed by AI/ML analysis of requests and replies that are passing through, making it the ultimate first line of API protection.

API-BL

The API-BL module protects APIs from Business Logic (BL) attacks that can lead to forbidden data or functionality access, or to abused business processes and fraud. These attacks partially appear in the “OWASP Top 10 – API security list”, while additional attack types were added by L7Defense.
The module performs in-session trafﬁc analysis to identify these attack patterns in RT, including session and historical data points. Together with the API-WAF module, it completes the ﬁrst line of protection.
Read more on our solution page

API-BOT

The API-BOT module protects APIs from business-related bot attacks as they appear in the “Automated Threats to Web Applications” list, also known as “OWASP Top 20”.
The module performs real-time full deep packet inspection (DPI), followed by near real-time AI/ML analysis of the API(s) trafﬁc, content, context, and metadata, using specific bot activity measurements that are made according to bot type activity characteristics.
Read more on our solution page

API-DDoS

The API-DDoS module protects APIs from DDoS attacks tailored against speciﬁc API(s). These attacks may use camouﬂage techniques, such as rotating source IPs or requests content randomization while using optimization algorithms to decide on the next wave of attack.
The module performs real-time deep packet inspection (DPI), followed by AI/ML analysis of the API(s) traffic in order to find exceptional API-related resource consumption within seconds.
Read more on our solution page

Ammune™ Unprecedented Sophistication

“Ammune™ contains an unsupervised learning model that monitors and analyzes data in real-time, identifying and stopping even subtle, stealthy attacks and effectively mitigating these without prior knowledge of the attack pattern parameters.

Ammune™, unlike traditional network traffic analysis tools, takes a bottom-up analysis line of action. It analyzes every API as separate units, iteratively builds negative and positive profiles of any API that spots and stops emerging threats that would otherwise go unnoticed”
Frost & Sullivan

Protect Your APIs Anytime, Anywhere

API (Internet) Companies

Rapid APIs changes are essential to keep business going. Inappropriate APIs protection solution may slow revenue’s growth and keep the company at a high level of cyber risk.

Ammune™ builds highly accurate protection for each new (or interface altered) API, seconds after its discovery, and starts immediately to protect it. It keeps the revenue steams in place, with very low operational costs.

Financial Institutions

Cloud frontend with legacy (on premise) backend tiers through APIs exposes financial institutions to cybersecurity risk.

Ammune™ is designed to protect APIs at a very high-quality level with minimal ongoing manual activities, enabling faster time to market (TTM) with no compromise regarding cyber security.

Fintech
Companies

APIs changes require adjusting and testing according to the cyber security procedures, which is tedious, time-consuming, and expensive.

Ammune™ reduces this extra time and cost as well as API security risks in real time. It is the perfect cyber defense solution to maintain the competitive edge without any additional time-to-market (TTM) delays.

Telecommunication Companies

The digital transformation of telcos consist of APIs and Apps moving into public clouds (Google, Azure and AWS), which on the downside exposes APIs to cyber security risks.

Ammune™ operates and protects APIs and Apps in the cloud and on premise by automatically discovering any exposure followed by tailoring an AI-based, accurate, and immediately activated protection policy for each API.

Industrial Companies

API-based communication is the lifeblood of Industry 4.0, making APIs an attractive potential target for cyber attacks. Currently, setting it up and maintaining an API-protection policy is a time-consuming and costly process.

Since API changes are made along the way, Ammune™ continuously updates its policies accordingly, protecting these APIs inline.