Akamai Australia: authorised partner for application, API and zero trust security

Akamai runs a globally distributed edge network and builds security on it. Its portfolio protects websites, applications and APIs from attack and abuse, and covers DDoS defence, bot management and zero trust controls such as microsegmentation and identity-based application access.

App & API Protector is Akamai's web application and API protection product, delivered from the edge. It combines a web application firewall, application-layer DDoS protection, bot controls and API discovery, with a hybrid option for on-premises and multi-CDN environments.

Yes. App & API Protector includes application-layer DDoS defence, and Prolexic protects data centres and network infrastructure against large volumetric DDoS attacks.

It is Akamai's microsegmentation product. It shows traffic between workloads across on-premises and cloud environments and enforces policy, so attackers and ransomware cannot move freely once inside.

App & API Protector enforces protection inline at the edge, including WAF and DDoS defence. API Security focuses on discovering APIs, assessing their posture, analysing runtime behaviour for abuse and testing APIs before release; Akamai positions the two as complementary.

Yes. Akamai runs a content delivery network: geographically distributed edge servers hold cached copies of content and serve users from a nearby location, which shortens load times. Its delivery products include Ion for application performance, and Adaptive Media Delivery and Download Delivery for media. Akamai's security products, such as App & API Protector, are also delivered from its edge.

Akamai's web application firewall is part of App & API Protector. It runs at the Akamai edge and guards against threats such as the OWASP Top 10 and known CVEs. Teams can manage it through a web interface, Terraform, APIs or the Akamai CLI, including within a CI/CD pipeline.

Prolexic routes incoming traffic through Akamai's scrubbing centres, which inspect it, separate attack traffic from valid traffic and forward only the clean traffic to your systems. It can run always-on, with all inbound traffic routed through it, or on demand, with traffic routed through it during an attack. Akamai also offers on-premises and hybrid options.

Bot Manager uses AI models for user behaviour analysis, browser fingerprinting and other signals to score traffic from 0 (human) to 100 (bot). You set the thresholds that decide whether to watch, challenge or mitigate, and can create categories for useful bots so they get through. Its insights can be sent to SIEM tools.

It can. Enterprise Application Access is Akamai's zero trust network access service: it grants identity-based access to specific private applications rather than the whole network, without a client for web applications and with a client for others. A connector deployed where the applications live makes an outbound connection, so no inbound firewall access is needed. It works with identity providers including Okta, Ping, Google and Microsoft Azure AD.

Yes. Akamai recommends agents for the most visibility and control, and offers agentless enforcement for legacy and OT assets that cannot run host-based security software. You can simulate a policy's impact before enforcing it.

Yes. TOM SHAW is an authorised Akamai partner in Australia. We supply, implement, integrate and support Akamai for Australian organisations.

Yes. We plan, deploy and configure Akamai in your environment and integrate it with your existing security tools.

Yes. We support Akamai after go-live, including tuning, upgrades, health checks and help when you need it.

Yes. TOM SHAW's Akamai implementation and support offering is listed on AWS Marketplace, so you can buy it through your AWS account.