Radware is a cybersecurity and application delivery company that protects web applications, APIs, networks and AI systems from attack while keeping application traffic flowing. Its customers are enterprises and carriers that need to stop DDoS floods, malicious bots and API abuse without slowing legitimate users down.
The same traffic inspection approach now extends to AI agents, the tools they call and the MCP servers that connect them to enterprise systems.
At A Glance
| Vendor | Radware (NASDAQ: RDWR) |
|---|---|
| Category | Application security, DDoS protection and application delivery |
| Identities covered | Bots and AI agents in traffic, agent identities on MCP servers, user accounts (account takeover) |
| Deployment | Cloud, on-premises and hybrid |
| Agentic AI | Agentic AI Protection, LLM Firewall, MCP Server Protection, Agent Trust Management |
| Customers | Internet2, Distrelec, Bosch, Mohawk, Boston Children’s Hospital |
| Certifications | ISO 27001, ISO 42001, ISO 22301, SOC 2 Type II, C5 and others |
| Market classification | Application Security |
What Radware Does
Radware sits in the path of application traffic. Whether that traffic reaches a cloud-hosted web app, an API, a data centre network or an AI agent, Radware inspects it, separates legitimate users from attackers and automated abuse, and blocks what should not get through. The same company also supplies the load balancing and delivery products that move that traffic, so security and delivery can be run from one vendor. Customers can run it as cloud services, as appliances in their own data centres, or both.
Products
Application And API Security
This family covers Cloud WAF, Bot Manager, API Security, Web DDoS Protection and Kubernetes WAAP. It is aimed at organisations whose web applications and APIs are exposed to the internet and attacked through business logic as much as through known exploits. An AI engine learns API call sequences and workflow logic from live traffic and generates and tunes policies on its own to catch abuse of that logic. Radware AI Xploit Shield adds custom signatures that are generated automatically for newly seen exploits.
Bot Manager
Bot Manager protects web apps, mobile apps and APIs from automated abuse, with the aim of safeguarding revenue, reducing data breach risk and easing the operational load on security teams. Its defence works in three layers:
- Preemptive blocking of unwanted IP addresses and identities before they cause damage
- Detection of distributed attacks, header anomalies and rotating IPs, backed by device and browser fingerprinting and behavioural analysis that spots account takeover attempts spread across many sources
- Invisible proof-of-work crypto challenges in place of CAPTCHA, so real users are not interrupted
For mobile apps, device attestation for Google and Apple devices and a Secure Identity feature guard against spoofing, tampering and replay. The Radware Bot Defense Lab provides real-time monitoring, investigation and weekly reports for customers who want analysts watching their bot traffic.
DDoS Protection
DDoS protection combines the Cloud DDoS Protection Service with DefensePro X appliances, Cyber Controller for management and threat intelligence feeds. It serves enterprises, carriers and cloud providers that need to absorb large volumetric attacks.
Application Delivery
Alteon, LinkProof NG and a content delivery network make up the delivery family. Alteon balances and accelerates application traffic in the data centre, and it is also one of the on-premises platforms on which MCP Server Protection can run.
How It Works
Radware can be deployed in the cloud, on premises or as a hybrid of the two.
| Cloud security centres | Radware owns and operates more than 65 cloud security centres and the equipment in them, built to mitigate attacks “closest to their point of origin”. Handling traffic in region shortens response times and helps customers meet data residency rules. |
|---|---|
| On-premises appliances | DefensePro X and Alteon run in the customer’s data centre. MCP Server Protection is available as a cloud-augmented service on top of these platforms, or through the Radware Cloud Application Protection Service. |
| Bot Manager deployment | Web server plugins, cloud connectors, a JavaScript tag, DNS redirection or a virtual appliance, with no change to the customer’s network or infrastructure. |
| Shared intelligence | An AI correlation engine shares data across the WAF, API protection and Bot Manager modules, so a signal seen by one informs the others. |
Identities And Systems Covered
| AI agents | Agents, the tools they use and their connections across enterprise, homegrown and cloud AI platforms, including developer-hosted agents such as Claude Code. |
|---|---|
| Agent identities on MCP servers | MCP servers in public clouds, private clouds, Kubernetes and hardware-based data centres. |
| Bots and automated traffic | AI crawlers, autonomous agents and malicious bots hitting web apps and APIs. |
| User accounts | Customer and user accounts targeted by large-scale account takeover. |
| Mobile apps and devices | Android and iOS apps and the devices they run on. |
Agentic AI Capabilities
Agentic AI Protection
Agentic AI Protection watches what AI agents do and stops attacks aimed at manipulating them, without getting in the way of normal agent work. It brings AI security posture management into the product. Its main capabilities:
- Discovery and mapping of agents, tools, connections and dependencies
- Guardrails against prompt injection, jailbreaks and unsafe outputs, including blocking tool calls that diverge from the agent’s goal
- Runtime monitoring of agent actions and intent
- MCP tool control that allows or blocks specific tools for each agent
- Posture risk scoring and audit-ready posture reports
MCP Server Protection
MCP Server Protection secures the MCP servers that link AI agents to enterprise applications, data and workflows. It shows which MCP servers are deployed, which tools and resources they expose and how agents use them. It examines agent identities, tool invocation patterns and behavioural anomalies, and protects against protocol abuse, authentication attacks, tool and resource enumeration, unauthorised MCP interactions, AI-driven tool flooding and denial of service. Governance features assess MCP exposure and enforce policy.
Agent Trust Management
Within Bot Manager, Agent Trust Management classifies AI crawlers and autonomous agents at the session level. Rather than a blanket allow or block, it uses active intent verification and dynamic trust scoring to decide how much automation to let through.
Company Background
| Listing | Traded on NASDAQ as RDWR. |
|---|---|
| Headquarters | Corporate headquarters in the United States and international headquarters in Tel Aviv, with offices across the Americas, EMEA and Asia Pacific. |
| Leadership | Roy Zisapel, President and Chief Executive Officer; Gabi Malka, Chief Operating Officer; David Aviv, Chief Technology Officer. |
| Scale | More than 1,200 employees and more than 12,500 enterprise and carrier customers in over 80 countries. |
| Recognition | Included in the 2026 IDC MarketScape for Worldwide Web Application and API Protection Platforms and in the SPARK Matrix: Bot Management, 2026 by QKS Group. |
Note: This overview is compiled from Radware’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.