Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions hugo/content/en/security/application_security/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ further_reading:
text: "Mitigate account takeovers with Datadog App and API Protection"
- link: "https://learn.datadoghq.com/courses/app-protection-block-attacks"
tag: "Learning Center"
text: "Block Application Attacks with Application & API Protection"
text: "Block Application Attacks with App and API Protection"
algolia:
tags: ["asm", "App and API Protection"]
site_support_id: application_security_override
Expand All @@ -60,7 +60,7 @@ AI Guard is in Preview. Get real-time security guardrails for your AI apps and a

{{< img src="/security/application_security/app-sec-landing-page.png" alt="A security signal panel in Datadog, which displays attack flows and flame graphs" width="75%">}}

**App & API Protection (AAP)** provides unified visibility and security for your applications and APIs, helping you detect, investigate, and prevent threats across modern workloads.
**App and API Protection (AAP)** provides unified visibility and security for your applications and APIs, helping you detect, investigate, and prevent threats across modern workloads.

Whether you're defending public-facing APIs, internal services, or user-facing applications, AAP equips your teams with realtime OOTB threat detection, posture assessment, and in-app protections.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ Click a finding to view its details and perform a workflow such as Validate > In

Datadog API Posture uses [Bits Code][3] to generate code fixes for vulnerabilities.

1. In Datadog, navigate to [**Security** > **App & API Protection** > **Findings**][1].
1. In Datadog, navigate to [{{< ui >}}Security{{< /ui >}} > {{< ui >}}App & API Protection{{< /ui >}} > {{< ui >}}Findings{{< /ui >}}][1].
2. Select a finding to open a side panel with details about the finding and the affected endpoint.
3. In the **Next Steps** > **Remediation** section, click **Fix with Bits**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ The OWASP API Security Top 10 identifies the most critical security risks for AP

## View your compliance posture

Navigate to [**Security > App & API Protection > Compliance**][4] to open the Compliance Frameworks page. You can:
Navigate to [{{< ui >}}Security{{< /ui >}} > {{< ui >}}App & API Protection{{< /ui >}} > {{< ui >}}Compliance{{< /ui >}}][4] to open the Compliance Frameworks page. You can:
- Select a framework (for example, OWASP API Security Top 10) to see per-control pass/fail status.
- Click a failing control to view the list of API security findings that caused it to fail.
- Open a finding's side panel to see the affected endpoint, severity, and recommended remediation steps.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ The actions covered in the next sections help you to identify and leverage detec

1. Open [Create a new rule][18].
2. Enter a name for the rule.
3. Select {{< ui >}}Signal{{< /ui >}} and remove all entries except {{< ui >}}App and API Protection{{< /ui >}}.
3. Select {{< ui >}}Signal{{< /ui >}} and remove all entries except {{< ui >}}App & API Protection{{< /ui >}}.
4. Restrict the rule to `category:account_takeover`, and expand the severities to include `Medium`.
5. Add notification recipients (Slack, Teams, PagerDuty).
To learn more, see [Notification channels][19].
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,7 @@ Ensure the AWS role attached to the [Connection][3] has the following permission
{{% /tab %}}
{{< /tabs >}}

After setup is complete, click **Block New Attackers** on the App & API Protection [denylist page][6]. Select the web ACL and associated AWS connection to block IP addresses.
After setup is complete, click **Block New Attackers** on the [denylist page][6]. Select the web ACL and associated AWS connection to block IP addresses.

[1]: /integrations/amazon-web-services/
[2]: /integrations/amazon_waf/
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -201,7 +201,7 @@ ENV DD_APPSEC_ENABLED=true

## Using AAP without APM tracing

If you want to use Application & API Protection without APM tracing functionality, you can deploy with tracing disabled:
If you want to use App and API Protection without APM tracing functionality, you can deploy with tracing disabled:

1. Configure your SDK with the `DD_APM_TRACING_ENABLED=false` environment variable in addition to the `DD_APPSEC_ENABLED=true` environment variable.
2. This configuration will reduce the amount of APM data sent to Datadog to the minimum required by App and API Protection products.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ aliases:
further_reading:
- link: "/security/application_security/setup/go/sdk"
tag: "Documentation"
text: "App & API Protection SDK for Go"
text: "App and API Protection SDK for Go"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Adding user information to traces"
Expand Down Expand Up @@ -90,7 +90,7 @@ Add the following environment variable value to your application container's Doc
ENV DD_APPSEC_ENABLED=true
```

For more information on how to create a fitting docker image, See <a href="/security/application_security/setup/go/dockerfile">Creating a Dockerfile for App & API Protection for Go</a>.
For more information on how to create a fitting docker image, See <a href="/security/application_security/setup/go/dockerfile">Creating a Dockerfile for App and API Protection for Go</a>.

{{% /tab %}}
{{% tab "Kubernetes" %}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -162,7 +162,7 @@ The Gateway API integration uses the [Datadog Go Tracer][6] and inherits all env

## Enabling APM tracing

By default, the request mirror traces won't enable Datadog's APM product. If you want to use Application & API Protection without APM tracing functionality, this is the default behavior.
By default, the request mirror traces won't enable Datadog's APM product. If you want to use App and API Protection without APM tracing functionality, this is the default behavior.

To enable APM tracing, set the environment variable `DD_APM_TRACING_ENABLED=true` in the request mirror deployment.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -168,21 +168,21 @@ If your service is a PHP service, explicitly set the environment variable to `DD
### Remote Configuration

If AAP was activated using [Remote Configuration][16], do the following:
1. Go to [Services][15].
2. Select **App & API Protection in Monitoring Mode**.
3. In the **App & API Protection** facet, enable **Monitoring Only**, **No data**, and **Ready to block**.
1. Go to [{{< ui >}}Services{{< /ui >}}][15].
2. Select {{< ui >}}App & API Protection in Monitoring Mode{{< /ui >}}.
3. In the {{< ui >}}App & API Protection{{< /ui >}} facet, enable {{< ui >}}Monitoring Only{{< /ui >}}, {{< ui >}}No data{{< /ui >}}, and {{< ui >}}Ready to block{{< /ui >}}.
4. Click on a service.
5. In **Capabilities** > **App & API Protection** > **Threat Detection**, click **Deactivate**.
5. In {{< ui >}}Capabilities{{< /ui >}} > {{< ui >}}App & API Protection{{< /ui >}} > {{< ui >}}Threat Detection{{< /ui >}}, click {{< ui >}}Deactivate{{< /ui >}}.

<div class="alert alert-info">If AAP was activated using <a href="https://app.datadoghq.com/organization-settings/remote-config">Remote Configuration</a>, you can use a <strong>Deactivate</strong> button. If AAP was activated using local configuration, the <strong>Deactivate</strong> button is not an option.</div>

### Bulk disable

To disable AAP on your services in bulk, do the following:
1. Go to [Services][15].
2. In the **App & API Protection** facet, enable **Monitoring Only**, **No data**, and **Ready to block**.
1. Go to [{{< ui >}}Services{{< /ui >}}][15].
2. In the {{< ui >}}App & API Protection{{< /ui >}} facet, enable {{< ui >}}Monitoring Only{{< /ui >}}, {{< ui >}}No data{{< /ui >}}, and {{< ui >}}Ready to block{{< /ui >}}.
3. Select the checkboxes for the services where you want to disable threat detection.
4. In **Bulk Actions**, select **Deactivate threat detection on (number of) services**.
4. In {{< ui >}}Bulk Actions{{< /ui >}}, select {{< ui >}}Deactivate threat detection on (number of) services{{< /ui >}}.



Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,19 +4,19 @@ disable_sidebar: true
further_reading:
- link: "/security/application_security/"
tag: "Documentation"
text: "Protect against Threats with Datadog Application & API Protection"
text: "Protect against Threats with Datadog App and API Protection"
- link: "/security/application_security/add-user-info/"
tag: "Documentation"
text: "Tracking user activity"
- link: "/security/default_rules/?category=cat-application-security"
tag: "Documentation"
text: "OOTB Application & API Protection Rules"
text: "OOTB App and API Protection Rules"
- link: "/security/application_security/troubleshooting"
tag: "Documentation"
text: "Troubleshooting Application & API Protection"
text: "Troubleshooting App and API Protection"
- link: "/security/application_security/how-it-works/"
tag: "Documentation"
text: "How Application & API Protection Works in Datadog"
text: "How App and API Protection Works in Datadog"
---

{{< site-region region="gov" >}}
Expand Down
Loading
Loading