Gartner defines cloud web application and API protection (WAAP) as security solutions designed to protect web applications and APIs from different types of attacks, irrespective of the hosting location. Delivered as a cloud-based service, core capabilities are web application firewalls (WAF), distributed denial of service (DDoS) mitigation, protection against advanced API attacks and automated traffic management (bot management).