# Overview

Akto API Protection is a powerful new module designed to detect and block threats in real time as they occur in your APIs. With customizable policies you can tailor the detection rules to meet your specific security needs.

#### Getting Started

To enable Akto API Protection, set the following environment variable in your Akto traffic connector module : `AKTO_THREAT_ENABLED=true`

Supported Akto traffic connectors for Akto API protection module are

* [eBPF Traffic Connector](/traffic-connector/ebpf.md)
* [Kubernetes Traffic Connector](/traffic-connector/kubernetes/kubernetes.md)
* [Virtual Machines Traffic Connector](/traffic-connector/virtual-machines.md)

### Key Features

* **Real-Time Threat Detection**: Identify and respond to API security threats as they occur.
* **OWASP Core Rule Set Support**: Detect common attack patterns in APIs such as XSS and SQL Injection.
* **Geofencing**: Restrict API access based on geographic locations.
* **IP-Based Blocking**: Block or allow API traffic from specific IP addresses or CIDR ranges.

#### Dashboard

<figure><img src="/files/jG5OlNgT4cmo8vjXFwHw" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.akto.io/api-protection/overview.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.