A device may extract content, path data, and query data from API requests, and may identify events based on the extracted data. The device may combine a sequence of the events with the events to generate sequence-embedded events, and may train a neural network model with the sequence-embedded events to generate a trained neural network model. The device may receive an API request, may extract new content, new path data, and new query data from the API request, and may identify new events based on the newly extracted data. The device may process the new events, with the trained neural network model, to generate predicted events, and may calculate an anomaly score based on the predicted events. The device may compare the anomaly score with a threshold to determine a risk for the API request, and may cause the API request to be blocked or permitted based on the risk.