API
The Gcore Customer Portal is being updated. Screenshots may not show the current version.
WAAP
WAAP
About WAAPBilling
Configure WAAP for a domainWAAP modesManage domains protected with WAAP
Protocol validationWAF and OWASP top threatsIP reputationBehavioral WAFAnti-automation and bot protectionCMS protectionCommon automated servicesAdvanced API protection
Allow and block IP addresses in firewall
API discoveryConfigure API access with reserved tagsManually add endpoints to API base path
Advanced rate limiting rulesAdvanced rule objects and attributesSource field objects
Create and manage custom rules
Reserved tagsPredefined tags
Create custom response pagesManage custom response pages
How does WAAP JavaScript injection work?What cookies are used by WAAP?What storage variables does WAAP use?
Enable and troubleshoot bot protectionTroubleshoot blocked usersTroubleshoot 5xx errors
API
Chosen image
Home/WAAP/API discovery and protection

API discovery and protection

API endpoints may expose sensitive data or functionality that's not accessible through the web interface, making them potential targets for attackers.

To ensure that your domain is fully protected with Gcore WAAP, extend your web security with advanced API protection settings:

  • API Discovery: set up automated detection of potential APIs; add and manage existing endpoints.

  • API base path: configure API protection by manually specifying the base paths of your API endpoints.

  • Configure API access with reserved tags: group APIs by access level and determine which user roles are permitted to access each group.

Was this article helpful?

Edit on GitHub