Metlo builds a baseline model of how your API generally behaves and is able to catch any anomalous traffic that may be an attacker doing reconnaissance or exploiting a 0-Day vulnerability. Metlo Protection detects and blocks attacks like:Documentation Index
Fetch the complete documentation index at: https://docs.metlo.com/llms.txt
Use this file to discover all available pages before exploring further.
- SQL Injection
- Cross-Site Scripting
- Server-Side Request Forgery
- Remote Command Execution
- Directory Traversal
- GraphQL Introspection
- High rates of 401 errors

Detections
You can also build your own detections to customize how and what Metlo flags as an attack.