Average Ratings 71 Ratings
Average Ratings 0 Ratings
Description
Engineered for peak performance and efficient resource use, KrakenD can manage a staggering 70k requests per second on just one instance. Its stateless build ensures hassle-free scalability, sidelining complications like database upkeep or node synchronization.
In terms of features, KrakenD is a jack-of-all-trades. It accommodates multiple protocols and API standards, offering granular access control, data shaping, and caching capabilities. A standout feature is its Backend For Frontend pattern, which consolidates various API calls into a single response, simplifying client interactions.
On the security front, KrakenD is OWASP-compliant and data-agnostic, streamlining regulatory adherence. Operational ease comes via its declarative setup and robust third-party tool integration. With its open-source community edition and transparent pricing model, KrakenD is the go-to API Gateway for organizations that refuse to compromise on performance or scalability.
Description
open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks.
It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways.
The open-appsec engine learns how users normally interact with your web application. It then uses this information to automatically detect requests that fall outside of normal operations, and sends those requests for further analysis to decide whether the request is malicious or not.
open-appsec uses two machine learning models:
1. A supervised model that was trained offline based on millions of requests, both malicious and benign.
2. An unsupervised model that is being built in real time in the protected environment. This model uses traffic patterns specific to the environment.
open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions.
API Access
Has API
No
API Access
Has API
No
Integrations
Kubernetes
Yes
AWS Lambda
Yes
AWS X-Ray
Yes
Amazon Simple Notification Service (SNS)
Yes
Datadog
Yes
Docker
Yes
Elasticsearch
Yes
Elestio
Yes
Google Cloud Pub/Sub
Yes
Grafana Cloud
Yes
Integrations
Kubernetes
Yes
AWS Lambda
No
AWS X-Ray
No
Amazon Simple Notification Service (SNS)
No
Datadog
No
Docker
No
Elasticsearch
No
Elestio
No
Google Cloud Pub/Sub
No
Grafana Cloud
No
Pricing Details
Open-source, Free to use, Community Edition available.
Commercial Edition available, including premium features and vendor support.
Commercial Edition available, including premium features and vendor support.
Free Trial
Yes
Free Version
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
KrakenD
Founded
2017
Country
Spain
Website
www.krakend.io
Vendor Details
Company Name
open-appsec
Founded
2022
Country
Israel
Website
www.openappsec.io
Product Features
API Management
API Design
Yes
API Lifecycle Management
Yes
Access Control
Yes
Analytics
Yes
Dashboard
Yes
Developer Portal
Yes
Testing Management
Yes
Threat Protection
Yes
Traffic Control
Yes
Version Control
Yes
API Testing
Functional Testing
Yes
Fuzz Testing
Yes
Load Testing
Yes
Penetration Testing
Yes
Runtime and Error Detection
Yes
Security Testing
Yes
UI Testing
Yes
Validation Testing
Yes
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
No
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Web Application Firewalls (WAF)
Access Control / Permissions
No
Alerts / Notifications
Yes
Automate and Orchestrate Security
Yes
Automated Attack Detection
Yes
DDoS Protection
No
Dashboard
Yes
IP Reputation Checking
Yes
Managed Rules
Yes
OWASP Protection
Yes
Reporting / Analytics
Yes
Secure App Delivery
No
Server Cloaking
No
Virtual Patching
No
Zero-Day Attack Prevention
Yes
