F5 Distributed Cloud Web App and API Protection (WAAP) is a cloud-native, SaaS-based security solution that protects web applications, mobile applications, and APIs across hybrid and multi-cloud environments. The solution combines web application firewall capabilities with API security, bot defense, and DDoS protection, providing comprehensive security controls and uniform observability with centralized policy enforcement. It implements signature-based protection, behavioral analysis, and machine learning capabilities while enabling virtual patching of risks from penetration testing and simplified lifecycle management of security policies across distributed environments. The solution delivers consistent security controls and observability across data centers, clouds, and edge locations, enabling detection and defense of digital endpoints through continuous monitoring and protection of business logic.