API Security: Real-Time Blocking or Detection and Response?

The API threat landscape is evolving rapidly. New uses of APIs are emerging. Transaction volumes are ever-increasing. And of course, threat actors are always finding new ways to outsmart even sophisticated API security measures.

This is forcing the teams charged with protecting APIs to make strategic trade-offs between two competing objectives: immediacy and accuracy.

The limitations of real-time blocking

Many security products, for example, web application firewalls (WAFs), bot mitigation, and first-generation API security approaches are optimized for immediacy. They …

api api security blocking business practices detection detection and response product response security