Akamai App and API Protector Primary Use Case

Pranav Vashisht - PeerSpot reviewer
Dev Ops at a media company with 501-1,000 employees

We are a media company, and the news delivery has to be the fastest. Any live event, such as a cricket match or election results, has to be really fast. We cannot afford any downtime or any factor like that. We need immediate delivery. There are things like caching, so when we have a five-minute TTL, we have to reduce it or increase it immediately. Those are mostly the use cases we have. We use 301, 4xx, and 5xx redirections a lot. That is pretty much the day-to-day activity. The image optimizer and things like that also come in handy.

View full review »
PallaviSharma - PeerSpot reviewer
Platform Engineer at a retailer with 10,001+ employees

With Akamai App and API Protector, we can define all our APIs, and we can use the solution for different purposes. It is the way we use API gateways like Kong. We can define our keys here, and we can define a limit at which we can start throttling traffic.

With BMP, we can protect our transaction endpoints from advanced and sophisticated bots.

URL protection can help us from DDOS attacks.

View full review »
Bharat Chandra - PeerSpot reviewer
Head of DevOpps at Indian express

We upgraded from Akamai WAF and ION to Akamai App and API Protector. We upgraded to Akamai App and API Protector mainly for Bot Manager because Bot Manager is included in it.

View full review »
Buyer's Guide
Akamai App and API Protector
April 2024
Learn what your peers think about Akamai App and API Protector. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,246 professionals have used our research since 2012.
Rahul_Agarwal - PeerSpot reviewer
GM IT at a recreational facilities/services company with 1,001-5,000 employees

We are using Akamai App and API Protector for the protection of our APIs. We have an OTT platform that serves as an aggregator of multiple providers. There are multiple channels streaming on the OTT platform. We need to protect the APIs as well as subscriber information and general information. Akamai App and API Protector protect us from hackers and malware attacks. It protects us from malware IPs and helps with proper streaming.

View full review »
ON
Security Analyst at a financial services firm with 10,001+ employees

I am currently working on a use case involving vulnerabilities and deferral requests made by individuals seeking to complete their remediation. These vulnerabilities are categorized and require an SLA for remediation based on their severity. If a certain category of vulnerability cannot meet the mitigation deadline, it must be approved. I am responsible for explaining why mitigation is impossible, the remediation time frame, and the holdup.

My approach to addressing vulnerabilities is to evaluate the risk from Akamai WAF's perspective and the application's exposure. I review the WAF for external vulnerabilities to determine if the specific issues have been addressed. The adaptive function of the WAF is powerful, as it can detect suspicious behavior and pick up on issues. The adaptive role sets and behavioral activities seem to be very effective in this regard. Additionally, the WAF can share information such as IP ranges or addresses associated with certain kinds of activity. If a threat is detected on one WAF, it may be blocked across all WAFs owned by different enterprises.

As for my understanding, I cannot say for certain. While I am not entirely sure about how the WAF works in sharing information and blacklisting potential threats, I believe it is an effective solution. However, I would caution against quoting me on this as I may not have all of the information.

So, that's a very powerful feature. However, assessing when something is not explicitly described in the rule set can be challenging. It's difficult to determine if it's being prevented or not. But, I have noticed that it's very effective at preventing people from even being able to identify the existing vulnerabilities. This is a great prevention measure, and it can adapt to different situations by considering various factors, including those specific to the WAF and threat intelligence data. It seems to work really well, but I can't speak to the overall effectiveness of all the activities.

View full review »
Aman Aijaz - PeerSpot reviewer
Assistant Manager Global Security at Convergys Corporation

It's mostly used for hosting a website or a domain online and protecting them from the application layer attacks.

View full review »
KE
Cyber Recovery Lead at a insurance company with 10,001+ employees

The tool protects organizations from attacks, SQL injection, and DDoS attacks. We mostly used it for DDoS attacks.

View full review »
AK
Sr Manger DevOps at Foundit

We are using Akamai App and API Protector for security purposes. We were not able to do monitoring of each and every API. It was really difficult. Most APIs are public, so we were looking for a solid security solution. Akamai gave us a demo. We liked it and purchased it.

View full review »
Anoop Mohan - PeerSpot reviewer
Associate Director at a computer software company with 201-500 employees

The majority of our traffic is app-based. We are a mobile-focused company. We have a news aggregation platform, and we have a TikTok type of social media platform in India. It is one of the largest platforms. Everything is on mobile applications, so we have a heavy use of APIs. We use Akamai App and API Protector to look at the traffic patterns and identify malicious traffic. There are people who try to inject malicious data and get into our infrastructure, we also use it for that. These are two use cases for which we use Akamai App and API Protector.

View full review »
BG
Network Administrator at Tommy Bahama

We are using the product mainly for our content delivery network and e-commerce. When the users go to our site, they get redirected to Akamai, which acts as a firewall and gets information from the cache or our web servers.

View full review »
PradeepKumar9 - PeerSpot reviewer
Manager of Infrastructure and Cloud at Foundit

I have been using Akamai's Content Delivery Network and WAF products. The Akamai App and API Protector product is new to us. We are still implementing it. 

We were facing some security issues. We faced some attacks in the past. That was the reason for implementing Akamai App and API Protector. We wanted to protect our website. That was the main reason.

View full review »
RB
Head of Infrastructure at AIA

We use Akamai Kona Site Defender because we need CDN. We have mobile apps, and we host them internally. Sometimes, we also deploy an IPA file for iPad. I think all the users from our distributor are going to download directly from our server. We use Akamai to distribute all the IPA files to our network provider without any significant latency for our distributor.

View full review »
Archana Heeralal - PeerSpot reviewer
Security Engineer at Amazon

We used Akamai Web Application Protector for protection from layer seven attacks.

View full review »
Archana Heeralal - PeerSpot reviewer
Security Engineer at Amazon

The product is used as a web application firewall for Layer 7, Layer 3, and Layer 4 DDoS protection. It is also used for caching, acceleration, and faster delivery.

View full review »
CF
Senior Security Engineer at a comms service provider with 10,001+ employees

I provide a service. We manage the Akamai service for our customers. Our customers are predominantly government agencies and medium-sized companies, and banks.

View full review »
LJ
Sr Manager Dev Ops at a media company with 10,001+ employees

As a media company with multiple properties, we utilize Akamai App and API Protector to manage and filter live traffic.

View full review »
Bill Lee - PeerSpot reviewer
Cloud Architecture Consultant at Metaage

Our company uses the solution to access and protect web applications. We have over 150 customers who use the solution. 

View full review »
SZ
Chief Technologist at a financial services firm with 11-50 employees

We use Akamai Web Application Protector to block IP addresses and countries. If for example, you don't want users from Amazon AWS, you could configure it to block them. 

It also has safeguards against common attacks like SQL injection. It does support some advanced custom rules, but you'll need someone from Akamai to code them. That isn't very user-friendly. 

View full review »
AC
CTO at a tech services company with 10,001+ employees

We're using it as DDoS on a basic WAF. We use a hybrid cloud deployment model. 

View full review »
Neha Shakyawar - PeerSpot reviewer
Head of Information at a leisure / travel company with 51-200 employees

We primarily use the solution as an application firewall.

View full review »
YA
Co-Founder and CEO at PT Eugenea Kreasi Utama

We use Akamai Kona for our cloud services.

View full review »
TI
Head of Cloud Security & DevSecOps at a financial services firm with 11-50 employees

We use this solution primarily to prevent DDoS attacks.

View full review »
IA
Solutions Architect, Cloud & SDDC at a computer software company with 5,001-10,000 employees

We have multiple use cases but the solution is primarily for content delivery network. The product has multiple features so we area also using it as a wall. It's really a combination between a CDN and a WAF. We also use Adidol switches. We are partners with Akamai and I'm a cloud solution architect. 

View full review »
GL
Security Architect at a retailer with 10,001+ employees

We use it for website protection.

View full review »
Buyer's Guide
Akamai App and API Protector
April 2024
Learn what your peers think about Akamai App and API Protector. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
768,246 professionals have used our research since 2012.