Datadog App and API Protection
LeaderDatadog provides cloud-scale monitoring and security for metrics, traces and logs in one unified platform.
Est 2010|Valuation $91.4B|Raised $795.9M
Published May 16, 2026
| Starting Price | Published per-host pricing available from the vendor for AAP; requires Infrastructure Monitoring | Some API Shield/WAF capabilities are gated to higher-tier plans; vendor pricing varies by plan | Vendor publishes memory-based pricing model for some application security components |
| Typical fit | Organizations using Datadog APM wanting code-level attack context and unified security signals | Edge-first API discovery, schema validation, and OWASP API protections without in-application agents | Organizations using Dynatrace platform seeking runtime security integrated with observability; memory-based pricing may align with certain infrastructure patterns |
| Key Strength | Correlation of attack signals to traces, stack traces, service ownership, and Datadog workflows | Edge enforcement, schema validation, and endpoint management without in-app instrumentation | Vendor-published memory-based model and integrated observability-security signals |
| Key Weakness | Requires commitment to the Datadog platform; potential cost and complexity concerns; in-application instrumentation dependency | Some advanced capabilities are gated to higher-tier plans and may require enterprise engagement | Platform commitment required; enterprise sales dynamics and minimums may apply |
Datadog versus edge WAAP/API security (Cloudflare):
Implication: If an organization’s primary objective is blocking and validating API traffic at the edge without in-application instrumentation, an edge WAAP vendor can be operationally simpler. If the objective is to link attacks to code execution and service ownership, Datadog’s in-application context may be preferred.
Datadog versus Fastly Next-Gen WAF (Signal Sciences):
Datadog versus Dynatrace Application Security:
Pricing comparison nuance:
Which model is cheaper in practice depends on host sizing, autoscaling behavior, and contract terms.