Best API Security Tools for Small Business

How Many API Security Tools Products Does G2 Track?

Total Products under this Category: 73

Category Stats (Oct 2026)

  • Average Rating: 4.57/5 (↑0.01 vs Sep 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Chronoloq (+2.16%) - Among all products in this category, Chronoloq recorded the largest rating increase compared to last month

Last updated: October 07, 2026

How Does G2 Rank API Security Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,300+ Authentic Reviews
  • 73+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for API Security Tools

G2 Grid® for API Security Tools plotting products by satisfaction and market presence

Highlighted products: Cloudflare Application Security and Performance, Postman, apisec.ai, Astra Pentest, Check Point WAF (formerly CloudGuard WAF), Intruder, Qodex.ai, and Harness Platform.

Underlying data: [Grid® JSON](https://www.g2.com/categories/api-security/grids.json?focus%5B%5D=cloudflare-application-security-and-performance&focus%5B%5D=postman&focus%5B%5D=apisec-ai&focus%5B%5D=astra-pentest&focus%5B%5D=check-point-waf-formerly-cloudguard-waf&focus%5B%5D=intruder&focus%5B%5D=qodex-ai&focus%5B%5D=harness-platform&segment=small-business)

Cloudflare Application Security and Performance

Cloudflare is the connectivity cloud for the "everywhere world," on a mission to help build a better Internet. We provide a unified platform of networking, security, and developer services delivered from a single, intelligent global network that spans hundreds of cities in over 125 countries. This empowers organizations of all sizes, from small businesses to the world's largest enterprises, to make their employees, applications, and networks faster and more secure everywhere, while significantly reducing complexity and cost. Our comprehensive platform includes: - Advanced Security: Protect your online presence with industry-leading DDoS protection, a robust Web Application Firewall (WAF), Bot mitigation, and API security. Implement Zero Trust security to secure remote access, data, and applications for your entire workforce. - Superior Performance: Accelerate website and application loading times globally with our Content Delivery Network (CDN), intelligent DNS, and smart routing capabilities. Optimize images and deliver dynamic content with unparalleled speed. - Powerful Developer Tools: Empower your developers to build and deploy full-stack applications at the edge using Cloudflare Workers (serverless functions), R2 Storage (object storage without egress fees), and D1 (serverless SQL database). Cloudflare helps connect and protect millions of customers globally, offering the control, visibility, and reliability businesses need to work, develop, and accelerate their operations in today's hyperconnected landscape. Our global network continuously learns and adapts, ensuring your digital assets are always protected and performing at their best.

Average Rating: 4.5/5.0

Total Reviews: 754

How Do G2 Users Rate Cloudflare Application Security and Performance?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 9.7/10 (Category avg: 8.9/10)

Who Is the Company Behind Cloudflare Application Security and Performance?

  • Seller: Cloudflare, Inc.
  • Company Website:
  • Year Founded: 2009
  • HQ Location: San Francisco, California
  • Twitter: @Cloudflare
    286,254 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    8,094 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Web Developer, Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 62% Small, 27% Medium

What Do G2 Reviewers Say About Cloudflare Application Security and Performance?

AI-generated summary from verified user reviews

Pros
  • Users value the robust security features of Cloudflare, appreciating its effective protection against attacks and fast page loads.
  • Users appreciate the user-friendly interface of Cloudflare, making management of security and performance settings effortless.
  • Users appreciate the user-friendly interface of Cloudflare, making security and performance management easy and efficient.
  • Users appreciate the enhanced site performance provided by Cloudflare, leading to faster page load times and improved security.
  • Users value Cloudflare's DDoS protection, as it effectively secures websites and significantly improves page load times.
Cons
  • Users find the complex user interface of Cloudflare challenging, often leading to confusion and a steep learning curve.
  • Users find the high pricing for advanced features to be a significant drawback, restricting access to essential tools.
  • Users find the complex setup challenging, particularly with advanced configurations that require extra time and support.
  • Users find the complexity of advanced configurations challenging, impacting user-friendliness for those new to security platforms.
  • Users experience a steep learning curve for advanced features in Cloudflare Application Security and Performance, complicating user experience.

What Are Recent G2 Reviews of Cloudflare Application Security and Performance?

What Are G2 Users Discussing About Cloudflare Application Security and Performance?

Postman

Postman is the world’s leading API platform, used by more than 40 million developers and 500,000 organizations to build, test, and manage APIs at scale. With Postman, teams collaborate efficiently across the entire API lifecycle, including design, development, testing, security, documentation, and governance. The platform helps ensure consistency, quality, and enterprise-grade control. Postman also offers Agent Mode (beta), built on AWS Bedrock and trained with AWS SageMaker. Agent Mode enables developers to use natural language to debug requests, organize collections, document APIs, and automate workflows without switching tools or writing custom scripts.

Average Rating: 4.6/5.0

Total Reviews: 1,753

How Do G2 Users Rate Postman?

  • API Testing: 9.5/10 (Category avg: 9.1/10)
  • API Monitoring: 9.1/10 (Category avg: 8.9/10)

Who Is the Company Behind Postman?

  • Seller: Postman
  • Year Founded: 2014
  • HQ Location: San Francisco, CA
  • Twitter: @getpostman
    55,430 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,580 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 39% Medium, 35% Small

What Do G2 Reviewers Say About Postman?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Postman for testing APIs, enabling quick requests and seamless collaboration.
  • Users appreciate the ease of API testing with Postman, enabling quick requests, responses, and debugging without extra code.
  • Users value the ease of API testing with Postman, appreciating its intuitive interface and comprehensive features.
  • Users appreciate the ease of testing APIs with Postman, benefiting from its intuitive interface and collaboration features.
  • Users value the testing efficiency of Postman, enjoying quick debugging and seamless API management across environments.
Cons
  • Users often face slow performance with Postman, especially when dealing with large projects or validation processes.
  • Users often face performance issues with Postman, experiencing slowdowns and unexpected bugs that disrupt their workflow.
  • Users find Postman slow to load at times, especially with large collections and multiple tabs open, affecting performance.
  • Users experience resource limitations with Postman, as the app can slow down and consume significant memory during use.
  • Users find the limited features in Postman's free tier challenging, especially for smaller teams needing advanced tools.

What Are Recent G2 Reviews of Postman?

What Are G2 Users Discussing About Postman?

apisec.ai

APIsec automated API testing platform automatically analyzes applications, simulates sophisticated attacks across the full spectrum of OWASP threats, and uncovers vulnerabilities and exploits before they reach production. By eliminating the need for time-consuming manual testing, APIsec helps security and development teams strengthen their security posture with continuous, preventative API protection. In addition, APIsec operates APIsec University, the world’s most popular API security education platform, offering dozens of free courses and a vibrant community of over 100,000 members. Together, our advanced security solutions and educational resources enable organizations to build, deploy, and maintain secure applications with confidence.

Average Rating: 4.7/5.0

Total Reviews: 227

How Do G2 Users Rate apisec.ai?

  • API Testing: 9.0/10 (Category avg: 9.1/10)
  • API Monitoring: 8.7/10 (Category avg: 8.9/10)

Who Is the Company Behind apisec.ai?

  • Seller: apisec.ai
  • Year Founded: 2018
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    41 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Consultant, Cyber Security Analyst
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 64% Small, 23% Medium

What Do G2 Reviewers Say About apisec.ai?

AI-generated summary from verified user reviews

Pros
  • Users commend the robust security features of Apisec.ai, effectively addressing API vulnerabilities and enhancing protection.
  • Users appreciate the ease of use of APISec.ai, making API scanning and navigation quick and efficient.
  • Users appreciate the automatic endpoint discovery of apisec.ai, enhancing visibility and streamlining API security assessments.
  • Users praise the testing efficiency of apisec.ai, benefiting from its automated and user-friendly API scanning capabilities.
  • Users value the automation of API scanning in apisec.ai, enabling effortless security testing and efficient problem resolution.
Cons
  • Users find API issues challenging, particularly regarding authentication setup and insufficient guidance for new users.
  • Users find the complex setup challenging, especially without clear guides or documentation for API security features.
  • Users express concern over the poor documentation, highlighting insufficient details and a lack of resources for internal developers.
  • Users note a difficult learning curve with APIsec.ai, especially for beginners navigating its extensive features.
  • Users feel the pricing is high for exams and wish for more affordable options tailored to their needs.

What Are Recent G2 Reviews of apisec.ai?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Astra Pentest

Astra Security is a leading continuous penetration testing platform that combines AI-powered autonomous pentesting with certified expert-led assessments. Powered by Attack AI, trained on 6.8M+ security findings and insights from 5,000+ real-world pentests. Astra deploys intelligent agents that continuously discover, validate, prioritize, and help remediate vulnerabilities at scale. While AI handles speed and scale, Astra’s certified security experts focus on what automation alone cannot: complex business logic flaws, multi-step attack chains, advanced exploit paths, and emerging AI/LLM-specific threats. Built for modern engineering teams, Astra integrates directly into CI/CD workflows, enabling continuous security validation between releases instead of relying on outdated annual pentests. The platform delivers comprehensive Autonomous Pentest powered by AI agents, DAST vulnerability scanner and human-driven pentests across web apps, AI/LLMs, mobile apps, APIs, cloud infrastructure. Astra is CREST-accredited, CERT-IN empaneled, and a PCI ASV-certified vendor. Our team also led the development of the OWASP APTS framework, helping shape the industry standard for continuous security testing. Today, 1,500+ organizations across 70+ countries trust Astra Security, including Ford, Loom, CompTIA, Hitachi, HackerRank, and OLX.

Average Rating: 4.7/5.0

Total Reviews: 248

G2 Deal: For G2 users: 10% off across all pentest plans

Avail Astra Pentest at 10% off, our comprehensive pentest suite scans for 8000+ security tests including OWASP Top 10, SANS 25, known CVEs & security best practices. This offer is exclusive to G2 users!

Price: ~~$5999~~ → $5400

View this exclusive G2 deal

How Do G2 Users Rate Astra Pentest?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Astra Pentest?

  • Seller: ASTRA IT, Inc.
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Bengaluru, IN
  • Twitter: @getastra
    694 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    154 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 67% Small, 28% Medium

What Do G2 Reviewers Say About Astra Pentest?

AI-generated summary from verified user reviews

Pros
  • Users commend Astra Pentest's excellent customer support, noting their responsiveness and flexibility throughout the process.
  • Users praise the comprehensive vulnerability detection of Astra Pentest, which simplifies tracking and prioritizing security issues.
  • Users appreciate the user-friendly interface of Astra Pentest, enhancing their experience with clear and efficient vulnerability management.
  • Users commend Astra Pentest for its efficient scanning and penetration testing, enhancing security preparedness and team responsiveness.
  • Users value the vulnerability identification of Astra Pentest, enhancing confidence in security and business growth.
Cons
  • Users report poor customer support with Astra Pentest, noting slow email responses and lack of instant messaging options.
  • Users find the poor interface design of Astra Pentest frustrating, leading to confusion and difficulties in usage.
  • Users report slow performance with Astra Pentest, citing delays in results and instability during use.
  • Users find the UI challenging, particularly with note-taking and clarity on rescan needs during pentests.
  • Users face a lack of information with Astra Pentest, as documentation and updates are often insufficient or slow to arrive.

What Are Recent G2 Reviews of Astra Pentest?

What Are G2 Users Discussing About Astra Pentest?

Check Point WAF (formerly CloudGuard WAF)

CloudGuard WAF is a cloud-native Web and API security solution designed to help users safeguard their applications from both known and unknown threats. By leveraging advanced contextual AI, this solution provides precise threat prevention without the need for traditional signature-based detection methods. This innovative approach allows organizations to maintain a robust security posture while minimizing the risks associated with evolving cyber threats. Targeted primarily at businesses that rely on web applications and APIs, CloudGuard WAF is particularly beneficial for enterprises in sectors such as finance, healthcare, and e-commerce, where data protection is paramount. The solution is designed to address the complex security challenges that arise in modern application environments, especially those utilizing continuous integration and continuous deployment (CI/CD) practices. As organizations increasingly adopt cloud-native architectures, the need for flexible and efficient security solutions becomes critical. One of the standout features of CloudGuard WAF is its preemptive protection capabilities. By employing machine learning-based security measures, the solution can effectively prevent zero-day threats, which are vulnerabilities that have not yet been discovered or patched. This proactive approach eliminates the reliance on frequent signature updates, allowing organizations to stay ahead of potential attacks without the need for constant manual intervention. Moreover, CloudGuard WAF excels in precise detection, enabling it to identify a broader range of attacks while minimizing the need for ongoing fine-tuning and exception creation. This feature not only enhances the accuracy of threat detection but also reduces the operational burden on security teams, allowing them to focus on more strategic initiatives rather than routine adjustments. Designed with cloud-native principles in mind, CloudGuard WAF supports CI/CD-friendly deployment and automation. This means that organizations can easily integrate the solution into their existing workflows, from installation to upgrades and configuration. By utilizing declarative infrastructure-as-code or APIs, users can streamline their security processes, ensuring that their applications remain protected as they evolve. Overall, CloudGuard WAF represents a significant advancement in the realm of web and API security, offering organizations a sophisticated and adaptable solution to combat the ever-changing landscape of cyber threats. Its combination of preemptive protection, precise detection, and cloud-native design makes it a valuable asset for any organization looking to enhance its security posture in today's digital environment.

Average Rating: 4.3/5.0

Total Reviews: 90

How Do G2 Users Rate Check Point WAF (formerly CloudGuard WAF)?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 9.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Check Point WAF (formerly CloudGuard WAF)?

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 58% Medium, 27% Small

What Do G2 Reviewers Say About Check Point WAF (formerly CloudGuard WAF)?

AI-generated summary from verified user reviews

Pros
  • Users value the strong protection offered by Check Point WAF, enhancing security against various web application threats.
  • Users commend the top-notch security of Check Point CloudGuard WAF, ensuring comprehensive protection across diverse environments effortlessly.
  • Users value the proactive AI-driven threat prevention of Check Point CloudGuard WAF, ensuring robust security effortlessly.
  • Users value the AI-driven threat prevention of Check Point CloudGuard WAF, offering seamless protection against various cyber threats.
  • Users commend Check Point WAF for its easy management across hybrid environments, enhancing efficiency and reducing operational burden.
Cons
  • Users find the complex setup challenging, making initial adoption and management of configurations difficult.
  • Users find Check Point WAF to be expensive, especially smaller teams, impacting their overall value and accessibility.
  • Users find the steep learning curve of Check Point WAF challenging, complicating the initial setup and usage.
  • Users face a difficult learning curve with Check Point WAF, making initial setup and navigation challenging for newcomers.
  • Users often find the user interface overwhelming, particularly during initial setup and while navigating complex features.

What Are Recent G2 Reviews of Check Point WAF (formerly CloudGuard WAF)?

Intruder

Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. By unifying AI penetration testing, attack surface monitoring, cloud security, and vulnerability management in one intuitive platform, Intruder gives stretched teams an always-on security source of truth. Our approach focuses on continuous automated scanning using expertise and agentic solutions to ensure that the findings we deliver are accurate, prioritized by real-world risk, and ready to act on. Founded in 2015 by Chris Wallis, a former ethical hacker turned corporate blue teamer, Intruder is now protecting over 3,000 companies worldwide. Intruder has been awarded multiple accolades, was selected for GCHQ’s Cyber Accelerator, included on Deloitte’s Tech Fast 50 2023 list as the fastest-growing cybersecurity company in the UK and was named in G2’s 2026 Best Software Awards.

Average Rating: 4.8/5.0

Total Reviews: 219

How Do G2 Users Rate Intruder?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 8.9/10 (Category avg: 8.9/10)

Who Is the Company Behind Intruder?

  • Seller: Intruder
  • Company Website:
  • Year Founded: 2015
  • HQ Location: London
  • Twitter: @intruder_io
    979 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    81 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, Director
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 56% Small, 37% Medium

What Do G2 Reviewers Say About Intruder?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Intruder, with quick setup and intuitive system design enhancing their experience.
  • Users value the clarity and prioritization of Intruder's findings, enabling effective risk management and actionable insights.
  • Users value the quick and efficient customer support from Intruder, enhancing their overall scanning experience.
  • Users appreciate the intuitive interface of Intruder, finding it easy to set up and navigate.
  • Users value the efficient vulnerability identification from Intruder, enhancing their cybersecurity management effortlessly.
Cons
  • Users find the product expensive due to high costs for add-ons and fees per endpoint scanned.
  • Users find the slow scanning process frustrating, leading to inefficiencies and missed vulnerabilities during security assessments.
  • Users find licensing issues challenging, particularly regarding costs and constraints that affect system configurations.
  • Users experience false positives which can obscure the detection of critical vulnerabilities in security monitoring.
  • Users find the limited features of Intruder less accommodating for specific reporting and customization needs.

What Are Recent G2 Reviews of Intruder?

What Are G2 Users Discussing About Intruder?

Qodex.ai

Qodex is a continuous testing platform built for teams shipping software at AI speed. It runs real tests across APIs, browser UIs, and security workflows, and reviews pull requests with execution evidence instead of model guesses. Teams can create reusable HTTP and Playwright scenarios from plain-language briefs, OpenAPI or Swagger specifications, Postman collections, spreadsheets, and existing tests. Scenarios can run on demand, on schedules, in CI/CD, through webhooks, and on pull requests. Findings include failing requests and responses, browser screenshots, and the context needed to distinguish a product defect from a stale test or environment issue. Qodex helps engineering teams catch breaking changes earlier while keeping tests readable, editable, and owned by the team.

Average Rating: 4.9/5.0

Total Reviews: 60

How Do G2 Users Rate Qodex.ai?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Qodex.ai?

  • Seller: QodexAI
  • Year Founded: 2023
  • HQ Location: San Francisco, California
  • LinkedIn® Page: linkedin.com
    13 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 75% Small, 20% Medium

What Do G2 Reviewers Say About Qodex.ai?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Qodex.ai, enabling quick learning and efficient API testing for all skill levels.
  • Users appreciate the automation of testing in Qodex.ai, greatly reducing testing time and enhancing reliability.
  • Users value the easy interface for writing test cases, streamlining the testing process and enhancing efficiency.
  • Users appreciate the testing efficiency of Qodex.ai, streamlining the testing process and reducing shipment time significantly.
  • Users appreciate the effortless automation of Qodex.ai, which streamlines API testing and enhances team productivity.
Cons
  • Users note that the slow loading of the UI can hinder their experience and requires improvement.
  • Users find the poor documentation hampers their ability to fully utilize Qodex.ai's advanced features effectively.
  • Users report slow performance with Qodex.ai, noting delays in UI loading and chatbot response times.
  • Users report bug issues including repeated test cases, and suggest improvements in bug classification and accuracy.
  • Users report bugs related to test cases and suggest improvements for prioritizing and flagging issues effectively.

What Are Recent G2 Reviews of Qodex.ai?

Harness Platform

Simplify your developer experience with the world's first AI-augmented software delivery platform. Upgrade your software delivery with Harness' innovative CI/CD, Feature Flags, Infrastructure as Code Management, and Chaos Engineering tools. We are a software delivery platform that helps developers and infrastructure engineers build and ship code for cloud and on-premise projects. We automate the continuous integration and continuous delivery (CI/CD) process to help teams build faster, ship more frequently, and improve quality, efficiency, and governance. We help companies in four key areas: Number one, we accelerate innovation through DevOps modernization. We provide an approach for software delivery that automates processes, reduces manual interventions, consolidates tools, and accelerates time-to-market for new products, features, and fixes. Number two, we improve developer experience. We give you the ability to attract, retain, and onboard high-caliber engineering talent while fostering a culture of continuous innovation and improvement. Number three, we secure software delivery. We give you the ability to integrate security into every phase of the SDLC. And last but not least is, we optimize cloud costs. We give you the ability to eliminate waste and to ensure that appropriate cloud resources are allocated at the right place at the right time.

Average Rating: 4.6/5.0

Total Reviews: 329

How Do G2 Users Rate Harness Platform?

  • API Testing: 8.9/10 (Category avg: 9.1/10)
  • API Monitoring: 9.8/10 (Category avg: 8.9/10)

Who Is the Company Behind Harness Platform?

  • Seller: Harness
  • Company Website:
  • Year Founded: 2018
  • HQ Location: San Francisco
  • Twitter: @HarnessWealth
    1,389 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,832 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Senior Software Engineer
  • Top Industries: Computer Software, Financial Services
  • Company Size: 41% Large, 40% Medium

What Do G2 Reviewers Say About Harness Platform?

AI-generated summary from verified user reviews

Pros
  • Users find the ease of use of Harness Platform essential for streamlining their development projects effectively.
  • Users highlight the easy integration and comprehensive documentation of Harness Platform, streamlining project implementation and feature management.
  • Users value the ease of managing feature flags across environments, enhancing flexibility and control in deployment.
  • Users appreciate the easy setup of Harness Platform, allowing quick implementation of feature flags and A/B testing.
  • Users find the easy integrations in Harness Platform enhance their workflow and improve productivity significantly.
Cons
  • Users note the missing features in Harness Platform, particularly regarding multiple filters and flexibility compared to other tools.
  • Users find the activation and deactivation clarity lacking, causing confusion in managing feature flags effectively.
  • Users express frustration over limited features, including SDK options and difficulties with traffic splitting and flag management.
  • Users note a steep learning curve with Harness Platform, requiring time to master its extensive features and tools.
  • Users criticize the poor UI of Harness Platform, finding it difficult to manage feature flags effectively.

What Are Recent G2 Reviews of Harness Platform?

What Are G2 Users Discussing About Harness Platform?

Pynt - API Security Testing

Pynt is an innovative API Security Testing platform exposing verified API threats through simulated attacks. Hundreds of companies rely on Pynt to continuously monitor, classify and attack poorly secured APIs, before hackers do.

Average Rating: 4.8/5.0

Total Reviews: 44

How Do G2 Users Rate Pynt - API Security Testing?

  • API Testing: 8.7/10 (Category avg: 9.1/10)
  • API Monitoring: 8.8/10 (Category avg: 8.9/10)

Who Is the Company Behind Pynt - API Security Testing?

  • Seller: Pynt
  • Year Founded: 2022
  • HQ Location: Tel Aviv, IL
  • Twitter: @pynt_io
    361 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    13 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Computer & Network Security
  • Company Size: 57% Small, 23% Large

What Do G2 Reviewers Say About Pynt - API Security Testing?

AI-generated summary from verified user reviews

Pros
  • Users value the flawless execution of vulnerability detection in Pynt, making security tests effortless and efficient.
  • Users value Pynt for its impressive security capabilities, quickly identifying and addressing critical vulnerabilities in API testing.
  • Users value the seamless integration of Pynt for API security, simplifying the process of securing APIs during development.
  • Users love Pynt for its easy integrations, streamlining API security testing with minimal effort and maximum efficiency.
  • Users appreciate the automation of API security testing with Pynt, enhancing efficiency and integrating seamlessly into workflows.
Cons
  • Users often find the complex setup challenging initially, impacting the integration experience with Pynt.
  • Users find the setup complexity challenging, especially for beginners, leading to potential conflicts and a less user-friendly experience.
  • Users find Pynt's limited features lacking, particularly in reporting and dashboard capabilities for managing multiple APIs.
  • Users find the poor interface design of Pynt frustrating, suggesting it needs significant improvements for better usability.
  • Users find the user interface needs significant improvement, which affects their overall experience with Pynt.

What Are Recent G2 Reviews of Pynt - API Security Testing?

Tenable Nessus

Built for security practitioners, by security professionals, Nessus products by Tenable are the de-facto industry standard for vulnerability assessment. Nessus performs point-in-time assessments to help security professionals quickly and easily identify and fix vulnerabilities, including software flaws, missing patches, malware, and misconfigurations - across a variety of operating systems, devices, and applications. With features such as pre-built policies and templates, customizable reporting, group “snooze” functionality, and real-time updates, Nessus is designed to make vulnerability assessment simple, easy, and intuitive. The result: less time and effort to assess, prioritize, and remediate issues.

Average Rating: 4.5/5.0

Total Reviews: 299

Who Is the Company Behind Tenable Nessus?

  • Seller: Tenable
  • Company Website:
  • HQ Location: Columbia, MD
  • Twitter: @TenableSecurity
    87,752 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,361 employees on LinkedIn®
  • Ownership: NASDAQ: TENB

Who Uses This Product?

  • Who Uses This: Security Engineer, Network Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 41% Medium, 33% Large

What Do G2 Reviewers Say About Tenable Nessus?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the extensive vulnerability identification capabilities of Tenable Nessus, enhancing their security risk management efforts.
  • Users value the comprehensive vulnerability detection in Tenable Nessus, enhancing their ability to manage security risks effectively.
  • Users praise the automated scanning of Tenable Nessus for its thoroughness and comprehensive vulnerability reporting.
  • Users value the ease of use of Tenable Nessus, appreciating its simple setup and user-friendly interface.
  • Users value the extensive reporting and automation capabilities of Tenable Nessus for better asset scanning.
Cons
  • Users note that slow scanning can take 2-3 days and may disrupt production environments due to high resource usage.
  • Users highlight the high costs of maintaining Tenable Nessus, which can be a barrier for many organizations.
  • Users find the limited features of Tenable Nessus restrictive, especially regarding host capacity and mobile app testing.
  • Users find the complexity of licensing and features in Tenable Nessus challenging, impacting overall usability and resource management.
  • Users report that false positives from Nessus can create additional workload and complicate vulnerability management processes.

What Are Recent G2 Reviews of Tenable Nessus?

What Are G2 Users Discussing About Tenable Nessus?

Wallarm API Security Platform

Protect any API. In any environment. Against any threats. Wallarm is the platform security teams choose to protect cloud-native APIs. The Wallarm platform gives teams the ability to detect and block API attacks. Customers choose Wallarm because it delivers a complete inventory of their APIs, AI apps, and agentic AI, along with patented AI/ML API abuse detection, real-time blocking on day zero, and an API SOC-as-a-service. Whether you protect legacy or brand new cloud-native APIs, Wallarm’s multi-cloud platform delivers the capabilities to secure your business against emerging threats. -> Robust protection for the entire API and AI portfolio Mitigate the OWASP API Top 10 threats and more; business logic abuse, bad bots, account takeover (ATO), and more. Get the robust API protection that no other tool can provide. -> Native inline blocking Wallarm is built from the ground up for inline blocking. Why deploy API security that can’t actually defend against API attacks? -> Unparalleled visibility into malicious traffic Gain full insights about attacks and attackers in the responsive Wallarm Console. Enjoy the Dashboard, search, and reporting capabilities, including visibility into API sessions. -> Complete API inventory Wallarm API Discovery provides full visibility into all your APIs, AI apps, and AI agents, including sensitive data flows, risk posture, shadow APIs and change detection. -> Understand Your Attack Surface You can’t protect what you don’t know about. Wallarm provides a comprehensive view of your API attack surface, including assessment of security controls and leaked sensitive API data. -> Quick integrations Setup cross-team collaboration with seamless integrations to your SIEM/SOAR, messaging applications, and workflow management.

Average Rating: 4.7/5.0

Total Reviews: 93

How Do G2 Users Rate Wallarm API Security Platform?

  • API Testing: 9.2/10 (Category avg: 9.1/10)
  • API Monitoring: 9.1/10 (Category avg: 8.9/10)

Who Is the Company Behind Wallarm API Security Platform?

  • Seller: Wallarm
  • Company Website:
  • Year Founded: 2016
  • HQ Location: San Francisco, California
  • Twitter: @wallarm
    3,197 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    142 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Mechanical or Industrial Engineering, Information Technology and Services
  • Company Size: 43% Medium, 42% Small

What Do G2 Reviewers Say About Wallarm API Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the accurate real-time threat detection of Wallarm API Security Platform, ensuring robust API protection.
  • Users value the accurate real-time threat detection of Wallarm API Security Platform, ensuring minimal false positives.
  • Users appreciate the simple integration and effective API threat prevention of Wallarm API Security Platform for enhanced security.
  • Users appreciate the simple cloud integration of Wallarm, enhancing API threat prevention effectively.
  • Users value the comprehensive security of Wallarm API Security Platform, ensuring robust protection and minimizing false positives.
Cons
  • Users often face API issues with unclear pricing during the trial, impacting their decision-making process.
  • Users find the configuration process complex, making it a challenge for newcomers to effectively utilize the platform.
  • Users find the configuration and tuning process complex, which can be challenging and time-consuming, especially for newcomers.
  • Users find the complex setup of Wallarm API Security Platform to be time-consuming, particularly for newcomers.
  • Users find the configuration and tuning process difficult, particularly facing challenges as new users of the platform.

What Are Recent G2 Reviews of Wallarm API Security Platform?

What Are G2 Users Discussing About Wallarm API Security Platform?

APPCHECK

AppCheck is a Dynamic Application Security Testing (DAST) and network vulnerability testing solution, developed and supported by experienced penetration testers. We approach security testing as a hacker would, leveraging multiple proprietary crawling engines to analyse target behaviour across both modern and traditional technologies, including Single Page Applications (SPAs), APIs, and complex authentication flows such as SSO, 2FA, and TOTP. Organisations can conduct unlimited security assessments across Web Applications, SPAs, APIs, cloud services, networks, across internal or external assets. Supporting production and UAT testing, AppCheck also helps organisations ‘shift left’ by integrating with CI/CD pipelines and build servers, including ADO, GitHub, Jenkins, TeamCity, CircleCI, TravisCI, Bamboo, and GitLab CI/CD. Allowing automated security testing throughout development, identifying risks as soon as changes are introduced. AppCheck are proud to be part of the CVE Numbering Authority (CNA), contributing to global security research

Average Rating: 4.7/5.0

Total Reviews: 68

How Do G2 Users Rate APPCHECK?

  • API Testing: 9.4/10 (Category avg: 9.1/10)
  • API Monitoring: 9.2/10 (Category avg: 8.9/10)

Who Is the Company Behind APPCHECK?

  • Seller: APPCHECK
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Leeds, GB
  • Twitter: @AppcheckNG
    649 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    104 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 49% Medium, 31% Small

What Do G2 Reviewers Say About APPCHECK?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of AppCheck, making complex processes straightforward and efficient.
  • Users commend AppCheck for its exceptional vulnerability detection, providing thorough coverage and easy integration into workflows.
  • Users value the excellent pricing and functionality of AppCheck, praising its usability and proactive support from the team.
  • Users commend AppCheck for its efficiency in pentesting, notably for thorough vulnerability coverage and seamless integration.
  • Users love the scanning efficiency of AppCheck, finding it reliable and easy to integrate within development workflows.
Cons
  • Users suggest that UX improvements in scoring, customization, and integrations could enhance the AppCheck experience.
  • Users find the API issues frustrating, as endpoint changes require a service request and delays functionality.
  • Users find difficult customization in AppCheck's reporting features, needing more flexibility for contextual adjustments.
  • Users experience a notable difficult learning curve with Appcheck, which may hinder initial ease of use.
  • Users find the false positives in scan results problematic, necessitating manual validation and complicating the reporting process.

What Are Recent G2 Reviews of APPCHECK?

Cequence Security

Cequence protects the applications and data that power enterprises in the agentic era. More than a decade of bot defense and API security experience has established Cequence as the leader of safe and secure agentic AI adoption. The Cequence platform delivers deep insight into user, entity, and agent behavior, enabling organizations to secure and control agentic AI workflows while protecting against bad actors and rogue agents. Cequence delivers value in minutes rather than days or weeks with a highly scalable, no-code approach. Trusted by the largest and most demanding private and public sector organizations, Cequence protects more than 10 billion daily API interactions and 4 billion user accounts. Cequence AI Gateway – Containment for Agentic AI Workflows The Cequence AI Gateway provides the discovery, governance, and security required to contain agentic AI workflows, delivering complete runtime agent containment for scalable, enterprise-wide deployment. Built-in governance and guardrails constrain agent behavior using capabilities that include least privilege access and protection against prompt injection and sensitive data loss. The AI Gateway’s agentic zero trust architecture enables enterprises to confidently deploy agentic workflows for internal productivity and customer-facing experiences. Bot Management – Bot Detection, Mitigation, and Fraud Prevention Cequence Bot Management protects organizations from the full range of automated attacks to prevent data loss, theft, and fraud. Bot Management is network based, requiring no agents, JavaScript, or SDKs. Behavioral fingerprints and multi-dimensional analytics provide a deep understanding of business context to identify and natively block attacks in real time. It mitigates a wide variety of cyberattacks including business logic attacks, exploits, automated bot activity, online fraud, and OWASP API Security Top 10 threats. API Security – API Security Posture Management Cequence API Security discovers, monitors, and tests enterprise APIs to assess and remediate risks and API coding errors that can lead to compliance and governance issues, data loss, and business disruption. Providing complete visibility and monitoring of internal, external, and third-party APIs, Cequence uncovers sensitive data exposure, tests pre-production and runtime APIs against specifications, and identifies OWASP API Security Top 10 vulnerabilities. A built-in AI Assistant and MCP server allow teams of all skill levels to effectively use the product through plain-language prompts. API Security includes over 200 pre-built risk rules mapped to more than 25 global frameworks including every version of the OWASP API Security Top 10, PCI DSS, GDPR, and NIST CSF.

Average Rating: 4.6/5.0

Total Reviews: 55

How Do G2 Users Rate Cequence Security?

  • API Testing: 8.4/10 (Category avg: 9.1/10)
  • API Monitoring: 9.2/10 (Category avg: 8.9/10)

Who Is the Company Behind Cequence Security?

  • Seller: Cequence Security
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Santa Clara, CA
  • Twitter: @cequenceai
    689 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    155 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Telecommunications, Information Technology and Services
  • Company Size: 40% Small, 35% Large

What Do G2 Reviewers Say About Cequence Security?

AI-generated summary from verified user reviews

Pros
  • Users value the robust protection against sophisticated bot attacks provided by Cequence Security, enhancing online security effectively.
  • Users value the powerful threat detection capabilities of Cequence Security, effectively mitigating sophisticated bot attacks and enhancing security.
  • Users value the time-saving automation of Cequence Security, allowing SOC teams to focus on critical tasks instead.
  • Users appreciate the effective vulnerability detection of Cequence Security, enhancing security while minimizing disruptions for legitimate users.
  • Users value the visibility and security Cequence Security provides for APIs, enhancing protection against advanced bot threats.
Cons
  • Users find the complex setup of Cequence Security challenging, requiring significant time for optimization and rule configuration.
  • Users find the difficult learning curve of Cequence Security requires significant technical expertise for effective setup and usage.
  • Users experience slow performance with Cequence Security, particularly during large data queries and incident responses.
  • Users experience lag and slow response times on the Cequence Security dashboard, hindering efficient data interpretation and decision-making.
  • Users report encountering false positives with Cequence Security, which complicates their traffic management and leads to frustration.

What Are Recent G2 Reviews of Cequence Security?

What Are G2 Users Discussing About Cequence Security?

Beagle Security

Beagle Security helps you identify vulnerabilities in your web applications, APIs, GraphQL and remediate them with actionable insights before hackers harm you in any manner. With Beagle Security, you can integrate automated penetration testing into your CI/CD pipeline to identify security issues earlier in your development lifecycle and ship safer web applications. Major features: - Checks your web apps & APIs for 3000+ test cases to find security loopholes - OWASP & SANS standards - Recommendations to address security issues - Security test complex web apps with login - Compliance reports (GDPR, HIPAA & PCI DSS) - Test scheduling - DevSecOps integrations - API integration - Team access - Integrations with popular tools like Slack, Jira, Asana, Trello & 100+ other tools

Average Rating: 4.7/5.0

Total Reviews: 85

How Do G2 Users Rate Beagle Security?

  • API Testing: 10.0/10 (Category avg: 9.1/10)
  • API Monitoring: 3.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Beagle Security?

  • Seller: Beagle Security
  • Year Founded: 2020
  • HQ Location: San Francisco, US
  • Twitter: @beaglesecure
    206 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, Director
  • Top Industries: Marketing and Advertising, Information Technology and Services
  • Company Size: 91% Small, 7% Medium

What Do G2 Reviewers Say About Beagle Security?

AI-generated summary from verified user reviews

Pros
  • Users commend the attractive reporting of Beagle Security, finding it easy to configure and comprehensive.
  • Users appreciate the easy setup of Beagle Security, finding it efficient for quick and effective implementation.

What Are Recent G2 Reviews of Beagle Security?

What Are G2 Users Discussing About Beagle Security?

Akto API Security Platform

Akto is a trusted platform for application security and product security teams to build an enterprise-grade API security program throughout their DevSecOps pipeline. Our industry-leading suite of — API discovery, API security posture management, sensitive data exposure, and API security testing solutions enables organizations to gain visibility in their API security posture. 1,000+ Application Security teams globally trust Akto for their API security needs. Akto use cases: 1. API Discovery 2. API Security Testing in CI/CD 3. API Security Posture Management 4. Authentication and Authorization Testing 5. Sensitive data Exposure 6. Shift left in DevSecOps

Average Rating: 4.5/5.0

Total Reviews: 54

How Do G2 Users Rate Akto API Security Platform?

  • API Testing: 8.8/10 (Category avg: 9.1/10)
  • API Monitoring: 9.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Akto API Security Platform?

  • Seller: Akto.io
  • Company Website:
  • Year Founded: 2022
  • HQ Location: San Francisco, California
  • Twitter: @Aktodotio
    1,357 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    29 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 44% Medium, 40% Small

What Do G2 Reviewers Say About Akto API Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly interface of Akto, finding the platform easy to navigate and manage projects.
  • Users praise Akto for its easy API security testing integration, seamlessly fitting into CI/CD pipelines and enhancing efficiency.
  • Users value the effortless integration of automation testing in Akto, enhancing efficiency within their CI/CD workflow.
  • Users praise Akto for its seamless integration with CI/CD pipelines, enhancing API security testing with minimal manual effort.
  • Users value the automated security testing capabilities of Akto API Security Platform, enhancing their API protection efforts.
Cons
  • Users find the complex initial setup challenging due to poor documentation and a steep learning curve.
  • Users find the documentation poor, making it challenging to configure advanced features effectively.
  • Users find that API issues hinder their experience, particularly due to a steep learning curve and complex configurations.
  • Users find the learning curve steep with Akto, especially for those unfamiliar with API security concepts and configurations.
  • Users find the setup complexity of Akto API Security Platform challenging due to poor documentation and steep learning curve.

What Are Recent G2 Reviews of Akto API Security Platform?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated
Reviews & FAQs

Reviews Summary: The Best API Security Software for Small-Business Businesses

Thanks to 5204 API Security software reviews and associated data from users working for small-sized companies, at G2 we have some of the most definitive data on the best API Security software for the smaller space. We have identified 16 individual API Security products offering the features, pricing and support that Small-Business companies look for when comparing API Security software and solutions. These reviews are generated using the qualitative and quantitative feedback from G2 members working in small-sized companies and who have used these API Security software products.

When G2 reviewers submit their API Security software reviews, they often provide information on the type of company they work for and what market segment they belong to. We break these different market segments into three distinct groups:

  • Small Business API Security Software Reviews (< 50 employees)
  • smaller API Security Software Reviews (51-1,000 employees)
  • Enterprise API Security Software Reviews (1,001+ employees)

smaller businesses have their own unique requirements when it comes to API Security software compared to small or enterprise companies. That is why these individual small-sized company API Security software reviews are especially helpful when comparing product set up, ease of use and overall cost.

Below you will find FAQs and review snippets for API Security software products that work well in smaller environments. These reviews are written by real G2 users working for these Small-Business companies who have real-world experience with these API Security software products.

FAQs About API Security Software for Small-Business Businesses

Q. What are the best API Security software products for small-sized businesses, according to G2 reviewers?
  • Cloudflare Application Security and Performance - 4.4-stars, 115 reviews (60% from smaller reviewers)
  • Postman - 4.6-stars, 389 reviews (34% from smaller reviewers)
  • apisec.ai - 4.6-stars, 145 reviews (64% from smaller reviewers)
  • Astra Pentest - 4.6-stars, 78 reviews (72% from smaller reviewers)
  • Check Point WAF (formerly CloudGuard WAF) - 4.2-stars, 23 reviews (30% from smaller reviewers)
Q. What are the least-liked API Security software products for professionals at small-sized companies, based on the overall G2 rating?
  • StackHawk - 4.8-stars, 14 reviews (37% from smaller reviewers)
  • Akto API Security Platform - 4.4-stars, 18 reviews (35% from smaller reviewers)
  • Cequence Security - 4.5-stars, 18 reviews (43% from smaller reviewers)
  • Beagle Security - 4.8-stars, 29 reviews (88% from smaller reviewers)
  • APPCHECK - 4.7-stars, 15 reviews (47% from smaller reviewers)
Q. What are the highest-rated API Security software tool features according to employees at Small-Business companies?
  • API Testing - 4.5-stars
  • API Verification - 4.5-stars
  • Reporting - 4.4-stars
Q. What are the features that are rated lowest by employees at Small-Business companies?
  • Bot Detection - 4.0-stars
  • Anomoly Detection - 4.2-stars
  • Change Management - 4.2-stars
Q. How many API Security software reviews are from users working in smaller companies?

1020 out of all API Security software reviews on G2 are from users working in Small-Business companies (20%).

Here's What Reviewers Working at smaller Businesses Have to Say About API Security Software

What Small-Business Professionals Liked What Small-Business Professionals Disliked

Qodex.ai: “We don’t have a huge QA team, so Qodex fills that gap. It’s like having one more person in the team.”

Read Review

Fastly's Web Application and API Security: “The user interface of Fastly Next Gen WAF is overwhelming and cumbersome to navigate. Its design lacks working making it time consuming to set up and manage rules. The customer support teams responsiveness is also lacking, which makes it difficult to obtain assistance, for refining configurations.”

Read Review

Qodex.ai: “Super helpful for backend-heavy teams. Once we linked it to Postman, we barely touched it again.”

Read Review

Cloudflare Application Security and Performance: “On-boarding support is non-existent. If you have an issue setting things up expect a period of extended downtime. Ticket responses are inconsistent. Sometimes a reply within 5-10 minutes. Other times up to 50 minutes for a response. A definite push to getting people onto Enterprise plans despite the jump from Business to Enterprise being $200 - $5000 per month simply so you can access telephone support. Perhaps that is why the rest of the support is so poor. ”

Read Review

Levo.ai: “Its ability to prioritize risks by real-world impact saved a lot of triage time.Its ability to prioritize risks by real-world impact saved a lot of triage time.”

Read Review

Postman: “While Postman is extremely functional, it can become resource-heavy on slower machines, especially with larger collections. The learning curve for some advanced features like scripting or automation can be a bit steep for beginners. Also, the collaboration features are limited unless you're on a paid plan.”

Read Review
Recommendations To Others Problems Solved & Benefits

StackHawk: “Leverage the trial period to install and implement things early and with little to no risk or cost. Establish performance baselines, and then scan continuously as you deploy, roll out and release products.”

Read Review

Astra Pentest: “As we move into production and start onboarding enterprise clients, we wanted to identify and fix security issues before scaling up. Astra helped us spot gaps in our APIs, understand the associated risks, and then validate that our fixes actually worked. Overall, it’s given us more confidence in our security posture and makes it easier to build trust with clients by showing that our systems have been independently tested.”

Read Review

Postman: “I think postman is going in the right direction and his apps have helped him stay in the market”

Read Review

Astra Pentest: “Astra Pentest provides a comprehensive security audit and report, essential for our enterprise client. Its speed, communication, and technical strength ensure quick responses and adherence to tight timelines, almost like chatting with teammates.”

Read Review

Postman: “Read the documentation carefully and play with Postman a bit before the real work. Try the team and export features to familiarize yourself with the tool, create a working process, then let's get to work.”

Read Review

Astra Pentest: “Astra Pentest helped us uncover potential vulnerabilities in our systems through their comprehensive testing. This has provided us with clear insights and actionable recommendations, enabling us to begin strengthening our security and ensuring a safer environment for our operations and client data.”

Read Review