title: Threat protection and bot detection policies in Azure API Manager
body: <p>1) Both Apigee and WSO2 have OOTB threat protection policies for threats such as XML Bombs, XML External Entity Attacks, XPath Injection, Javascript Injection etc. Does Azure API manager support that? </p>
  
  <p>2) Apigee supports bot detection. Does Azure APIM support that?</p>