Cloudflare has recently introduced API Shield, a free security tool that protects API traffic against attacks designed to perform unauthorized actions or exfiltrate data. Strong client certificate-based identity is already generally available while schema validation is currently a closed beta.
With the deployment and enforcement of mTLS authentication, Cloudflare API Shield secures the APIs using client-certificate-based encryption. The provider of Content Distribution Network (CDN) and DDoS mitigation services claims that 50% of the 18 million requests per second that traverse its network are directed towards APIs, with the majority blocked as malicious.
