Overview

F5 API Security Local Edition is a self-hosted solution that helps organizations discover and analyze API activity within their environment without external connectivity or cloud services. The product ingests per-request HTTP metadata exported from BIG-IP systems and uses it to discover API endpoints, identify shadow and zombie APIs, detect sensitive data flows, flag unauthenticated access, and support governance workflows.

F5 API Security Local Edition is designed for environments where data locality, privacy, or regulatory requirements demand fully self-managed API traffic inspection. All components run within the customer environment, and no outbound internet connectivity is required.

F5 API Security Local Edition does not block traffic directly. When a user triggers a block from the user interface, the product calls the BIG-IP iControl REST API to update the relevant WAF policy. BIG-IP then enforces the block using its existing security stack.