NTT's Application and API Shield offering is powered by F5 Distributed Cloud Web Application and API Protection (WAAP) Platform. This solution delivers robust and effective security across public clouds and on-premises architectures to protect organizations from compromise, fraud, and abuse.

The NTT Application and API Shield provides the following:

• Protect against emerging threats - As apps evolve and API deployments increase, attack surface areas are increasing and bring greater risk.
• Dramatically simpler operations - Reduce the number of point solutions and centralize security policy enforcement across distributed environments.
• Best-in-class bot detection and WAF - Market-leading bot detection technology for highly accurate protection from malicious bots.
• Protect the entirety of your apps - Selective coverage is no longer enough. Apps need protections for WAF, API security, DDoS, and bots.
• Consistent security policies everywhere - Deploy consistent policies across your entire estate of apps regardless of where they’re hosted.
• End-to-end observability - Gain valuable insights and telemetry across your distributed app infrastructure from a centralized user interface.

This solution integrates four key security components as below:

• Web Application Firewall (WAF) - Protects web-based applications through full proxy inspection of application requests and responses to mitigate a broad spectrum of threats.
• API Protection - Guards application programming interfaces from threat actors that attempt to exploit and/or abuse them to facilitate a breach, service outage, or fraud.
• Bot Defence - Manages and detects bots and malicious automation while brokering legitimate machine-to-machine communication to defend against business logic attacks, account-take-over, credential stuffing and more.
• DDoS Protection - Shields critical infrastructure from volumetric and targeted L7 denial-of-service attacks that attempt to overload your services; often resulting in a loss of customer confidence and access to services.

NTT Service Variants - Application and API Shield offering:

• Starter - This tier comes with Advanced WAF, Basic version of API Security & Bot Defence with signature-based detection and DDoS mitigation.
• Silver - This tier comes with Advanced version of WAF & API Security utilizing the Machine Learning / AI engine to identify malicious clients, Basic Bot Defence and DDoS mitigation.
• Gold - This tier comes with Advanced version of WAF, API Security and Bot Defence utilizing the Machine Learning / AI engine to identify malicious clients and DDoS mitigation.
• Plus - This tier is for multi-cloud networking and Security with Customer Edge for on-premises and public clouds