Uploaded April 2023 | Updated September 2026, 1 week ago

---

NGINX App Protect WAF supports GraphQL APIs in addition to REST and gRPC APIs. It secures GraphQL APIs by applying attack signatures, eliminating malicious exploits, and defending against attacks. GraphQL traffic is natively parsed, enabling NGINX App Protect WAF to detect violations based on GraphQL syntax and profile and apply attack signatures.

Visibility into introspection queries enables NGINX App Protect WAF to block them, as well as block detected patterns in responses. This method helps to detect attacks and run signatures in the appropriate segments of a payload, and by doing so, helps to reduce false positives. Watch this demo to learn how NGINX App Protect WAF provides protection for GraphQL APIs.

Learn more at docs.nginx.com

Additional Resources:

Blog: Secure Your API Gateway with NGINX App Protect WAF
⬢ bit.ly/41rSKjZ

Webpage: NGINX App Protect WAF
⬢ bit.ly/41IEYtc

Datasheet: NGINX App Protect WAF
⬢ bit.ly/40sebzX

eBook: Modern App and API Security
⬢ bit.ly/3UMu2s5

eBook: Mastering API Architecture from O’Reilly
⬢ bit.ly/3KPHYx0

Free Trial: Test Drive NGINX App Protect WAF for 30 Days
⬢ bit.ly/3Ad9WOk