← Cloudflare API Shield / api-shield

API Gateway

Cloudflare API Shield provides API security, management tools, and integration with the Cloudflare Developer Platform for building new APIs.

• Security: Protect APIs with JWT validation, mutual TLS (mTLS) authentication, schema validation, and defenses against the OWASP Top 10 API Security risks ↗.

• Management and monitoring: Use endpoint management, analytics, and routing tools to streamline API operations. Monitor risks with Posture Management and gain visibility through Security Analytics.

• Development: Build and deploy APIs using the Cloudflare Developer Platform with its serverless infrastructure and developer tools.

• Protection Against OWASP Top 10 API Security risks: Mitigate common API vulnerabilities, including injection attacks and improper asset management.

• Endpoint management: Gain visibility into your API endpoints, including discovery of shadow APIs and monitoring of active endpoints.

• Analytics and logging: Access detailed analytics and logs to monitor API usage, performance, and security events.

• API Routing: Optimize API performance and reliability with secure routing.

• Posture Management: Monitor API Authentication status and receive alerts for common API risks.

The Cloudflare Developer Platform ↗ offers a serverless execution environment, allowing you to build and deploy new APIs without the need to manage infrastructure. Its benefits include:

• Global scalability: Deploy APIs across Cloudflare's global network for low latency and high availability.

• Integrated services: Use storage, databases, and AI tools alongside your APIs.

• Developer tools: Build with frameworks and tools that support the API development workflow.

To begin using Cloudflare API Shield, refer to our Get started guide.

For detailed instructions and additional resources, refer to the API Shield documentation.