There's no special app to protect your APIs. You use App & API Protector to cover both your web site and your public APIs. For APIs, you just need to take a few extra steps to:

  • specify where your APIs live, by registering them in our API Definitions app

  • make sure you include them in security protections scope, by associating their hostname and, if you use App & API Protector with Advanced Security Module, creating an API Match Target for each one you want to cover with a security policy.