FortiWeb
by Fortinet
Web application and API firewall from Fortinet with bot mitigation, API discovery and zero-day protection.
About
Web application and API firewall from Fortinet with bot mitigation, API discovery and zero-day protection.
FortiWeb protects business-critical web applications and APIs from web-based threats that target known and unknown vulnerabilities. It uses anomaly detection and AI to catch zero-day exploits and provides advanced threat analytics with a built-in SOC agent.
The product covers bot defense, API discovery and protection, and client-side protection, and integrates with the Fortinet Security Fabric. It is offered as hardware appliances, virtual machines on VMware, Hyper-V, Citrix XenServer, Xen, VirtualBox, KVM and Docker, public cloud on AWS, Azure, Oracle and Google Cloud, container appliances, and as the FortiWeb Cloud WAF-as-a-Service.
Key features
Product details
Vendor
Fortinet
Category
Application & API Security
Pricing model
custom
Starting price
Contact for pricing
Free trial
No
Deployment
Hardware appliance; virtual machine; public cloud (AWS, Azure, Oracle, Google Cloud); container; SaaS (FortiWeb Cloud WAF-as-a-Service)
Pricing
Similar software
42Crunch
by 42Crunch
API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.
Aikido Security
by Aikido Security
Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.
Akamai API Security
by Akamai Technologies
API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.
Barracuda WAF-as-a-Service
by Barracuda Networks
Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.
Black Duck Polaris
by Black Duck
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
Burp Suite Professional
by PortSwigger
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.