What Wallarm does

Wallarm is an enterprise software company that provides API security and AI workload governance for organizations running AI on AWS. Founded in 2016 and headquartered in San Francisco, the company is private and backed through a $55 million Series C round closed in July 2025 with Toba Capital as lead investor. Its customer base spans large global enterprises across consumer electronics (Panasonic, Samsung), retail (Victoria's Secret), productivity (Miro, Dropbox), gaming (Wargaming, Xsolla), fintech (Rappi), and healthcare (UZ Leuven), with additional focus areas in financial services and healthcare verticals.

The company's technology is anchored by a patented non-invasive kernel analysis approach built on eBPF, which observes AI agent behavior at the kernel level without modifying application code or deploying sidecars. This capability powers three core products that compose the AI Control Platform: AI Hypervisor (runtime enforcement on EKS with per-call AI visibility and kernel-level policy blocking), Infrastructure Discovery (cross-account AWS topology mapping and shadow-AI surfacing), and API Security (inline protection across REST, GraphQL, gRPC, SOAP, and WebSocket). Supporting offerings include API Security Testing integrated into CI/CD, WAF and WAAP modules, Wallarm MCP Protection for securing externally exposed Model Context Protocol servers, the MCPJail open-source tool, and Wallarm University certification training. Wallarm holds AWS Security Competency certification and has its platform generally available on AWS Marketplace with native integrations to GuardDuty, Security Hub, IAM Access Analyzer, Inspector, and Macie.

Wallarm operates a subscription SaaS business model with annual enterprise contracts supplemented by a freemium Free Tier for self-service adoption and an Infrastructure-Grade API Security Assessment tool for benchmarking maturity. Distribution is hybrid: enterprise field sales targeting CISOs, CIOs, CTOs, and compliance leaders at organizations deploying AI on AWS; AWS Marketplace listings with private offers and co-sell capabilities; and a self-service tier for mid-market prospects. Geographic expansion is underway, with a Middle East Cloud Point of Presence launched in May 2026 to serve Saudi Arabia and GCC customers with in-region data residency. Revenue figures are not publicly disclosed.

Name

Wallarm

Legal name

Wallarm, Inc.

Website

https://wallarm.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

101–250 employees

Short description

Wallarm is an enterprise API and AI workload security platform, built for organizations running AI on AWS. It combines patented eBPF kernel-level runtime enforcement, cross-account AI topology discovery, and inline API protection, delivered via subscription SaaS and AWS Marketplace to security leaders and developers globally.

Ownership category

akta.pro rank

Product category

API and AI Security Software

akta.pro primary industry

Secure Model Deployment & Runtime Protection (sandboxing, isolation) (HDAAAKAH)

akta.pro secondary industry

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

Keywords

• API security platform
• AI workload protection
• Runtime API monitoring
• Web application firewall
• Cloud security compliance

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Subscription SaaS: Cloud-based subscription service with tiered plans. Free Tier provided for new customers with monthly usage limits. Paid Commercial Services offered as subscription-based access with subscription length defined in signed contracts.
2. AWS Marketplace: Available on AWS Marketplace with private offers and co-sell capabilities. Flat-rate pricing and free tier available for Infrastructure Discovery product.

Pricing tiers

Go-to-market motion4 records

Distribution channels3 records

Marketing channels9 records

Core offering

Wallarm is an AI security and API security platform that discovers AI workloads, monitors runtime behavior, enforces policy inline, and generates continuous compliance evidence, built for enterprises running AI on AWS. The unified AI Control Platform combines AI Hypervisor (kernel-level enforcement), Infrastructure Discovery (cross-account visibility), and API Security (inline OWASP API Top 10 protection) to deliver Discover, Observe, Enforce, and Govern capabilities in a single closed loop.

Product overview

Wallarm offers an AI Control Platform architecture centered on securing AI workloads and APIs in enterprise environments. The platform comprises three core products: AI Hypervisor (kernel-level runtime enforcement on EKS), Infrastructure Discovery (cross-account AWS visibility), and API Security (inline API protection across REST, GraphQL, gRPC, SOAP, and WebSocket). These three products work together within the AI Control Platform to deliver Discover, Observe, Enforce, and Govern capabilities in a single closed loop. Supporting products include API Security Testing (CI/CD integrated testing), WAF and WAAP (traditional application protection), Wallarm MCP Protection (MCP server security), and MCPJail (open-source AI agent security tool). Wallarm University provides certification training, and the platform is certified for AWS Security Competency and available on AWS Marketplace.

Differentiator

Problem solved

Functional benefit

Products and services

• AI Control Platform Unified enterprise software platform providing continuous visibility, governance, and enforcement across AI workloads in production environments. Closes the loop between AI deployment and control through four integrated functions: Discover (cross-account topology and shadow AI surfacing), Observe (runtime behavior monitoring at the per-call level), Enforce (kernel-level policy enforcement), and Govern (continuous compliance evidence generation). Built for AWS.
• AI Hypervisor Kernel-level runtime enforcement on EKS that instruments every AI workload without touching application code. Observes every AI agent decision, enforces policy at the connection level, attributes every outbound call back to the triggering user, detects PII crossing AI boundaries in real time, and blocks policy violations at the kernel in seconds.
• Infrastructure Discovery Cross-account visibility across entire AWS estate that maps every AI workload, surfaces shadow AI within minutes of deployment, and auto-provisions AI Hypervisor when qualifying EKS clusters are found. Uses cross-account IAM role assumption with no stored credentials.
• API Security Inline protection for APIs that AI workloads call and the applications they power. Blocks OWASP API Top 10, abuse, and account takeover across REST, GraphQL, gRPC, SOAP, and WebSocket protocols on the same platform as AI governance.
• API Security Testing Automated API security testing integrated into CI/CD pipelines, including schema-based testing that brings automated security validation into the development lifecycle to catch vulnerabilities before deployment.
• WAF (Web Application Firewall) Traditional web application firewall protection that guards applications against common web exploits and attacks.
• WAAP (Web Application and API Protection) Combined WAF, API security, and bot management solution providing comprehensive protection for web applications and APIs.
• Wallarm MCP Protection Product designed to secure externally exposed MCP servers supporting machine-callable capabilities, adding automated server discovery, session-level visibility, and schema-based real-time enforcement for MCP infrastructure.
• MCPJail Open-source tool for securing AI agents by providing sandboxing and security controls for Model Context Protocol implementations.

Quantifiable outcome

• 97% of API vulnerabilities can be exploited in a single request
• +6 more outcomes

Named customers15 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability5 records

Feature7 records

Partnerships

Two partnerships are on record, tiered core and flagship.

• PostmancoreTechnology or Integration · 18 March 2026Integration between Postman's Agent Mode feature and Wallarm's Rogue MCP Server Detection. Enables users to scan machines for installed MCP servers, flag risky permissions, generate hardened configuration files for production deployments, and verify provenance against Postman's trusted registry with security posture snapshots.
• Amazon Web Services (AWS)flagshipTechnology or Integration · 5 June 2025AWS Security Competency partner with AI Control Platform available on AWS Marketplace. Integration with AWS security services including GuardDuty, Security Hub, IAM Access Analyzer, Inspector, and Macie. Platform certified against AWS's own AI security criteria with cross-account IAM role assumption for visibility.

Scale indicators6 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Noname Security: Direct API security competitor acquired by Akamai; offers API posture management, runtime protection, and testing. Wallarm explicitly benchmarks against Noname on its own comparison page, indicating direct overlap in enterprise API security buying cycles.
• Salt Security: API security platform focused on API discovery, runtime protection, and behavioral analytics. Competes head-to-head with Wallarm in enterprise API security, including in AI workload protection extensions; also called out on Wallarm's comparison page.
• Traceable AI: API security and AI security platform with API discovery, threat detection, and LLM/AI workload protection. Direct overlap with Wallarm's combined API security and AI Control Platform positioning; explicitly listed on Wallarm's comparison page.
• Cequence Security: API security and bot management platform offering discovery, runtime protection, and fraud prevention. Closely comparable in target buyer (enterprise CISOs) and product scope (API security plus bot mitigation), competing in similar deal cycles.

Broad incumbents

• Cloudflare: Broad cloud security incumbent with API Shield, WAF, and bot management capabilities. Overlaps with Wallarm's WAAP offering and increasingly competes on developer-platform API security; much larger scale and bundled pricing pose competitive pressure on Wallarm's mid-market motion.
• Akamai: Global CDN and security incumbent with App & API Protector and acquired Noname Security assets. Competes with Wallarm across WAAP and runtime API protection at the enterprise tier; broader portfolio and infrastructure footprint create bundled competitive risk.
• F5: Application delivery and security incumbent with NGINX and Distributed Cloud API Security. Overlaps with Wallarm's API security and WAAP modules; competing as an established enterprise vendor with deeper legacy install base in financial services and telco.
• Palo Alto Networks: Cybersecurity platform incumbent with Prisma Cloud API security and AI runtime posture capabilities. Competes via bundled CNAPP-plus-API security suite; large enterprise sales force and broader platform positioning threaten Wallarm's standalone wedge.

Emerging players

• Impart Security: API security runtime protection platform built on eBPF, similar in technology approach to Wallarm's AI Hypervisor. Emerging competitor in the same niche with overlapping buyer personas and a comparable non-invasive kernel instrumentation story.
• DataDome: Bot management and API protection platform with strong bot mitigation capabilities. Overlaps with Wallarm's abuse prevention and account takeover protection functionality, though more focused on bot traffic than AI workload governance.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/wallarm
• LinkedInlinkedin.com/company/wallarm
• Xx.com/wallarm
• Facebookfacebook.com/wallarm

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds5 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Wallarm