App & API Protector

- Scalable management model: support both high-level governance and deep, granular configuration enabling centralized administration across very large and distributed environments. - Mature WAF protections: strong detection coverage for common OWASP Top 10 attack patterns and other prevalent web threats, with consistent protection out of the box. - Fast response to emerging threats: rapid rules updates for newly disclosed/zero-day vulnerabilities help maintain protection without requiring immediate manual action from the security team. - Strong security analytics and troubleshooting: the web security analytics experience is SIEM-like, with clear visibility into events and explicit, explainable reasons for blocks which accelerates tuning, investigation and false-positive validation.

Regularly update to block new attacks

Always-On performance, a distributed edge network, adaptive defenses and superior bot and API protection. We also like the application mapping and actionable reporting. Akamai's technical account managers and support engineers are proactive, deeply knowledgeable, and do take care of their customers and their cases.

- Integration between products: Some products are intertwined (for example, Client Reputation and Bot Manager both drink from the same fountain) which could lead to false positives. - Lack of customization on specific features: Penalty Box feature can't be set with a custom penalty time, being bind to 10 minutes of a block - this adds a lot of friction for potential true clients. Client Reputation can't use common-base clients for blocking rules.

Reporting period

I have to say it's the complexity of the platform's sheer depth. While it offers unparalleled control, the configuration process can be very complex for non-specialists and making the most of the advanced features often requires dedicated technical expertise. The Luna control center has some parts that are a bit less intuitive compared to some other products.