App and API Protection capabilities

The following App and API Protection capabilities are supported in the .NET library, for the specified tracer version:

The minimum tracer version to get all supported App and API Protection capabilities for .NET is 3.44.0. The following capabilities are not yet supported: gRPC Monitoring, GraphQL Monitoring. Note: AAP requires enabling Remote Configuration, which is included in the listed minimum tracer version.

Supported deployment types

Note: Azure App Service is supported for web applications only. App and API Protection capabilities are not supported for Azure Functions.

Language and framework compatibility

.NET App and API Protection uses the Datadog .NET tracer and therefore inherits the same runtime and platform compatibility constraints as APM instrumentation. For applications running on modern .NET runtimes, see the .NET tracer compatibility page for .NET Core and later. For applications running on .NET Framework, see the .NET tracer compatibility page for .NET Framework.

Integrations

The .NET tracer includes support for the following frameworks, data stores and libraries.

Web framework compatibility

• Attacker source HTTP request details
• Tags for the HTTP request (status code, method, etc)
• Distributed Tracing to see attack flows through your applications

Networking framework compatibility

Data store compatibility

Datastore tracing provides:

• SQL attack detection
• Query info (for example, a sanitized query string)
• Error and stacktrace capturing

Note: The table below lists database integrations with explicit datastore-level coverage. App and API Protection also analyzes untrusted HTTP request input, so some protections can still apply even when a database integration is not listed here.

Filesystem compatibility

Subprocess compatibility