All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This analysis is scoped to Akamai security portfolio.
Akamai's security portfolio is durable where its controls sit and where the network feeds them, thinner on the delivery model and the regulatory bar. Akamai runs its WAAP, Prolexic, Bot Manager, and access lines inline on an edge customers already route application traffic through, which makes Akamai the front door applications route through to be reachable. Bot Manager's models also train on shared cross-network traffic a single-tenant rival cannot assemble. Against that, the controls are configurable software the customer runs rather than a judgment Akamai is accountable for, no rule mandates them, and a competing edge or gateway can repoint at the same problems. The durable core is placement plus network-scale telemetry, not one capability the portfolio owns alone.
| Description | Akamai is a cloud delivery and security company whose security portfolio protects apps, APIs, and networks at the edge, spanning WAAP, Prolexic DDoS protection, Bot Manager, Guardicore microsegmentation, Zero Trust access, client-side protection, and Firewall for AI. | [f1] |
|---|---|---|
| Founded | 1998 | [f2] |
| Deployment | SaaS | [f3] |
| Product | What it does |
|---|---|
| App & API Protector | WAAP combining WAF, layer-7 DDoS defense, API discovery, sensitive-data protection, and bot controls, tuned by the Adaptive Security Engine. |
| Prolexic | DDoS protection across cloud, on-prem, and hybrid, with 20+ Tbps of dedicated defense capacity, 32 scrubbing centers, and a zero-second mitigation SLA. |
| Bot Manager | Bot detection and management using machine learning and shared telemetry to distinguish good bots, bad bots, and humans at the edge. |
| Akamai Guardicore Segmentation | Software-based microsegmentation that maps dependencies and enforces Zero Trust policies to contain lateral movement and ransomware across hybrid estates. |
| Enterprise Application Access | Zero Trust Network Access providing identity- and context-based access to private applications as a cloud service, reducing reliance on VPNs. |
| Client-Side Protection & Compliance | Browser-side script monitoring that defends against Magecart and web-skimming attacks and eases PCI DSS v4.0 script-security compliance. |
| Akamai Firewall for AI | Inspects LLM prompts and responses at the edge or via API, blocking prompt injection, jailbreaks, toxic output, and sensitive-data exposure. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Akamai Firewall for AI inspects LLM prompts and responses at the edge or via API, blocking prompt injection, toxic output, and sensitive data exposure. It is mapped to the AI Defense Matrix. [f4]
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
App & API Protector, Prolexic, Bot Manager, Akamai Guardicore Segmentation, Enterprise Application Access, and Client-Side Protection defend customer applications, networks, devices, data, and user accounts. These conventional security lines are mapped to the Cyber Defense Matrix. [f5]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 3/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 4/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Akamai cybersecurity solutions overview | official | 2026-06-23 |
| f2 | Akamai Technologies FY2025 Form 10-K (SEC EDGAR) | regulatory | 2026-06-27 |
| f3 | AI Defense Matrix Catalog entry | other | 2026-06-10 |
| f4 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| f5 | Akamai Guardicore Segmentation page | official | 2026-06-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Akamai cybersecurity and network security solutions “Secure high-risk AI interactions, prevent DDoS attacks, deliver Zero Trust security, and understand and detect API risk and mitigate cyberthreats, all with the power of Akamai's global platform. ... GigaOm Radar: Akamai a Microsegmentation Leader.” | official | 2026-06-23 |
| s2 | Akamai App & API Protector (WAAP) product page “All-in-one solution includes our WAF plus L7 DDoS defense, API discovery, sensitive data protection, and bot controls. ... A core technology, Adaptive Security Engine, learns attack patterns and adapts to future cybersecurity threats. ... Fintech leader Finastra protects apps and APIs with Akamai.” | official | 2026-06-23 |
| s3 | Akamai Prolexic DDoS protection product page “Prolexic's 32 anycast global scrubbing centers with 20+ Tbps of dedicated DDoS defense ... industry-leading zero-second mitigation ... 225+ frontline SOCC defenders are working for you. ... Intuit keeps TurboTax, QuickBooks, and Mint available and secure year-round with Akamai.” | official | 2026-06-23 |
| s4 | Akamai Guardicore Segmentation product page “The AI-powered segmentation platform with exposure analysis and response ... limit lateral movement risk at machine speed. ... Gartner Peer Insights Customers' Choice 2026. ... global consulting leader Deloitte partnered with Akamai. ... Daiwa Capital Markets secures its trading systems.” | official | 2026-06-23 |
| s5 | Akamai Bot Manager product page “Akamai Bot Manager uses advanced machine learning and shared telemetry to distinguish between good bots (like search engines), bad bots (like scrapers), and human users. ... Bot Manager integrates the insights generated from Bot Score into SIEM tools.” | official | 2026-06-23 |
| s6 | Akamai Enterprise Application Access (ZTNA) product page “Akamai Enterprise Application Access is a Zero Trust Network Access solution that provides fast, secure, identity-based access to private applications. It uses real-time data such as user location, time, and device security to grant access only to necessary apps, eliminating network-level access.” | official | 2026-06-23 |
| s7 | Akamai Client-Side Protection & Compliance product page “Defend your site from client-side threats. Ease compliance with PCI DSS v4.0 ... It also helps businesses directly address requirements 6.4.3 and 11.6.1 in the latest PCI DSS v4.0 ... Client-Side Protection & Compliance goes beyond what WAFs can see or defend against on the client side.” | official | 2026-06-23 |
| s8 | Akamai Reports First Quarter 2026 Financial Results (Akamai newsroom) “Security revenue of $590 million, up 11% year-over-year. ... First quarter revenue of $1.074 billion, up 6% year-over-year. ... Cash from operations for the first quarter of 2026 was $313 million, or 29% of revenue. ... uniquely positioned to benefit from the rapid evolution of AI.” | press | 2026-06-23 |
| s9 | Akamai Firewall for AI product page “Akamai provides flexible deployment options, allowing businesses to integrate the firewall via: Akamai edge: Low-latency protection at the network edge. REST API integration. ... AI governance frameworks (AI TRiSM, OWASP Top 10 for LLM Applications).” | official | 2026-06-23 |
| s10 | StockTitan: Akamai Reports First Quarter 2026 Financial Results (AKAM) “Q1 2026 Revenue: $1.074 billion. Cloud Infrastructure Services revenue: $95 million. Security revenue: $590 million ... Delivery and other cloud applications revenue was $389 million. ... security revenue increasing from $552M to $568M and now $590M.” | press | 2026-06-23 |
| s11 | Akamai Firewall for AI techdocs (Protect your AI apps) “Firewall for AI is here to help you protect your artificial intelligence apps, chatbots, and LLMs from emerging threats. ... Offered in limited availability. ... It applies security guardrails to both inputs and outputs.” | official | 2026-06-23 |
| s12 | Akamai Client-Side Protection web-skimming defense “Malicious or compromised JavaScript resources within the browser allow web skimming, formjacking, and Magecart attacks to steal payment card data, user credential details, or personally identifiable information.” | official | 2026-06-23 |
| s13 | Akamai Technologies FY2025 Form 10-K (SEC EDGAR) “Our security solutions currently generate the largest portion of our revenue.” | regulatory | 2026-06-27 |
| s14 | SiliconANGLE: Akamai inks $600M deal to acquire microsegmentation startup Guardicore “Akamai Technologies Inc. today said that it has inked a $600 million deal to acquire Guardicore Ltd., a Tel Aviv-based startup with a microsegmentation platform for securing corporate networks.” | press | 2026-06-27 |
| s15 | SecurityWeek: Akamai to Acquire API Protection Startup Noname Security for $450 Million “As part of the deal, which is expected to close in the second quarter of 2024, Akamai will pay out roughly $450 million for all the outstanding equity of Noname.” | press | 2026-06-27 |
| s16 | NVD CVE-2025-53841: Akamai Guardicore Platform Agent local privilege escalation “The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to.” | research | 2026-06-27 |
| s17 | The Register: Akamai uncovers two zero-days powering the InfectedSlurs Mirai botnet “Akamai has uncovered two zero-day bugs capable of remote code execution, both being exploited to distribute the Mirai malware and built a botnet army for distributed denial of service (DDoS) attacks.” | press | 2026-06-27 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Akamai cybersecurity and network security solutions “Secure high-risk AI interactions, prevent DDoS attacks, deliver Zero Trust security, and understand and detect API risk and mitigate cyberthreats, all with the power of Akamai's global platform. ... GigaOm Radar: Akamai a Microsegmentation Leader.” | official | 2026-06-23 |
| s2 | Akamai App & API Protector (WAAP) product page “All-in-one solution includes our WAF plus L7 DDoS defense, API discovery, sensitive data protection, and bot controls. ... Adaptive protections push zero-days and CVE protections. ... Fintech leader Finastra protects open finance apps and APIs with Akamai.” | official | 2026-06-23 |
| s3 | Akamai Prolexic DDoS protection product page “Prolexic's 32 anycast global scrubbing centers with 20+ Tbps of dedicated DDoS defense ... industry-leading zero-second mitigation ... 225+ frontline SOCC defenders are working for you. ... Intuit keeps TurboTax, QuickBooks, and Mint available and secure year-round with Akamai.” | official | 2026-06-23 |
| s4 | Akamai Guardicore Segmentation product page “Provide provable, continuously-enforced segmentation controls that support strict audit, compliance, and governance requirements (PCI-DSS, HIPAA, SWIFT). ... Gartner Peer Insights Customers' Choice 2026. ... Daiwa Capital Markets secures its trading systems with Akamai Guardicore Segmentation.” | official | 2026-06-23 |
| s5 | Akamai Bot Manager product page “Akamai Bot Manager uses advanced machine learning and shared telemetry to distinguish between good bots (like search engines), bad bots (like scrapers), and human users. ... Continuous updates to our known bot directory.” | official | 2026-06-23 |
| s6 | Akamai Enterprise Application Access (ZTNA) product page “Akamai Enterprise Application Access is a Zero Trust Network Access solution that provides fast, secure, identity-based access to private applications. ... Enterprise Application Access integrates with most existing identity providers (IdPs), such as Akamai, Google, Ping, Okta, Microsoft Azure AD.” | official | 2026-06-23 |
| s7 | Akamai Client-Side Protection & Compliance product page “It also helps businesses directly address requirements 6.4.3 and 11.6.1 in the latest PCI DSS v4.0 ... Client-Side Protection & Compliance goes beyond what WAFs can see or defend against on the client side.” | official | 2026-06-23 |
| s8 | Akamai Reports First Quarter 2026 Financial Results (Akamai newsroom) “Security revenue of $590 million, up 11% year-over-year. ... First quarter revenue of $1.074 billion, up 6% year-over-year. ... Our security portfolio is also uniquely positioned to benefit from the rapid evolution of AI.” | press | 2026-06-23 |
| s9 | Akamai Firewall for AI product page “Akamai provides flexible deployment options, allowing businesses to integrate the firewall via: Akamai edge: Low-latency protection at the network edge. REST API integration. ... AI governance frameworks (AI TRiSM, OWASP Top 10 for LLM Applications).” | official | 2026-06-23 |
| s10 | StockTitan: Akamai Reports First Quarter 2026 Financial Results (AKAM) “Security revenue +11% YoY to $590 million ... security revenue increasing from $552M to $568M and now $590M. ... Q1 2026 Revenue $1.074 billion ... Security revenue $590 million Q1 2026 security revenue, up 11% year-over-year.” | press | 2026-06-23 |
| s11 | Akamai Firewall for AI techdocs (Protect your AI apps) “Firewall for AI is here to help you protect your artificial intelligence apps, chatbots, and LLMs from emerging threats. ... Offered in limited availability. ... It applies security guardrails to both inputs and outputs.” | official | 2026-06-23 |
| s12 | Akamai Client-Side Protection web-skimming defense “Malicious or compromised JavaScript resources within the browser allow web skimming, formjacking, and Magecart attacks to steal payment card data, user credential details, or personally identifiable information.” | official | 2026-06-23 |
| s13 | NVD: CVE-2025-30143 Akamai App and API Protector ASE rule bypass “Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties.” | other | 2026-06-30 |
| s14 | U.S. SEC EDGAR: Akamai Technologies Form 10-Q for the quarter ended March 31, 2026 “Security $ 589,790 $ 530,695 11 % 9 %” | regulatory | 2026-06-30 |
| s15 | NVD: CVE-2026-34354 Akamai Guardicore Platform Agent privilege escalation “Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directory.” | other | 2026-06-30 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.