STIGhubSTIGhub
STIGsSearchCompareAbout

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to Application Programming Interface (API) Security Requirements Guide

V-274769

CAT II (Medium)

The API must use Web Application Firewall (WAF).

Rule ID

SV-274769r1143807_rule

STIG

Application Programming Interface (API) Security Requirements Guide

Version

V1R1

CCIs

CCI-000366

Discussion

The API must be protected by a Web Application Firewall (WAF) or an API Gateway that monitors and filters incoming and outgoing traffic to prevent injection attacks, ensuring malicious inputs are detected and blocked.

Check Content

Verify the API is configured to use a WAF or API Gateway to manage traffic.

If the API is not configured to use a WAF or API Gateway in accordance with organization-defined security policies, this is a finding.

Fix Text

Build or configure the API to use a WAF or API Gateway to manage traffic.