Wallarm
Verified Oct 15, 2026 ActiveAPI and AI security platform that blocks attacks on APIs and web apps in real time and governs AI workloads.
Listed on EffectHub ·
Pricing
- Pricing model
- Contact sales
Core WAAP and Advanced API Security plans are quote-only through sales, and the docs say AI Hypervisor has no self-service signup. A Security Edge free tier allows 500,000 requests a month and 3 users with some features removed; Infrastructure Discovery is bought through AWS Marketplace. The main site blocked our fetcher, so plans were read from the vendor's documentation.
Use tool ↗About Wallarm
Wallarm protects APIs and web applications by analysing traffic in real time, blocking attacks such as injection, brute force and layer-7 DDoS, and scanning for vulnerabilities across cloud-native and multi-cloud setups. Since June 2026 it sells this as an AI Control Platform with four products: API Security (a WAAP core plus an Advanced API Security add-on for the OWASP API Top 10), Infrastructure Discovery for AWS estates, AI Hypervisor for runtime policy and compliance evidence on AI workloads running in Amazon EKS, and API Security Testing. The main plans are quote-only, while a self-service Security Edge free tier covers up to 500,000 requests a month for up to three users.
- Platforms
- Web · API
- API
- Yes
- Last verified
- Oct 15, 2026
Verified sources
- Subscription plans: Cloud Native WAAP and WAAP + Advanced API Security activated via sales; Security Edge free tier up to 500 thousand requests per month and 3 users; console disabled at 100% of quota and protection at 200% (15 October 2026)docs.wallarm.com ↗
- Documentation describes the Wallarm AI Control Platform with four products, including AI Hypervisor on Amazon EKS with no self-service signup; footer reads 2026 Wallarm Inc. (15 October 2026)docs.wallarm.com ↗
- Wallarm's own blog introduces the AI Control Platform, joining AI security and API security, with AI Hypervisor and Infrastructure Discovery as its first products (15 October 2026)lab.wallarm.com ↗
Is Wallarm legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- Domain registered
- Nov 29, 2010 (15 years ago)Registry record (RDAP), registrar Amazon Registrar, Inc., looked up Sep 6, 2026
- TLS certificate
- Issued by Google Trust Services, valid until Dec 3, 2026Seen in our own connection to the site on Oct 15, 2026
- Last checked
- Oct 15, 2026The site answered, but turned our crawler away
- On the market since
- 2014The vendor's own material, read by us
- Operated by
- Wallarm Inc., United StatesOur research, card verified Oct 15, 2026
Pros & cons of Wallarm
Wallarm's core business is watching API and web traffic in real time to catch attacks and scan for vulnerabilities, and it has over a decade of operating history plus a long list of independent reviews to back that up. Pricing for its main plans is entirely sales-gated, so the only way to try it without a sales call is the narrower, free Security Edge tier.
Pros
- Combines real-time attack detection with vulnerability scanning in one platform
- Over a decade of operating history and a substantial base of independent reviews
- A genuine free tier (Security Edge, up to 500,000 requests/month) exists for smaller-scale, self-service use
- Has expanded into securing AI workloads specifically, not just traditional web APIs
Cons
- Core WAAP and Advanced API Security plans have no published price; every serious deployment needs a sales call
- The free tier is capped at 500,000 requests a month and 3 users, well short of production scale for most companies
- Its own marketing homepage returned a blocked response on direct access during this research, which limited first-hand verification of that page
Best for
- Security and platform teams protecting APIs across cloud-native environments
- Organizations needing OWASP API Top 10-level coverage, not just a basic firewall
- Teams wanting to test attack detection at small scale through the free Security Edge tier first
Not for
- Individual developers or very small projects wanting a fully self-service, transparently priced tool
- Teams wanting to compare exact pricing without a sales conversation