Honestly, I'm guessing this is a Enterprise only product, it is a Enterprise only product, and I don't want to dish out $3000 and any more for the additional addon , but I'm curious on its extent of implementation? Does it span to also protect APIs against DDos Attacks? Such as preventing requests on specific endpoints from directy visiting it with a browser.
For example, a Get User Information endpoint meant to be used by your user dashboard javascript, but not visited directly?