Imperva: Protecting the Data that Drives Business Blog|Login|Chinese German Japanese|Follow @imperva
Cloud WAF

Cloud-based Web Application Security

Having an online presence is critical for businesses of all sizes. Smaller enterprises face a particular challenge because hackers often prey on these organizations, translating a large volume of small gains into a profitable cyber crime business.

Imperva Cloud WAF, powered by Incapsula, is an easy and affordable cloud-based Web Application Firewall service that offers businesses a powerful way to protect critical Web applications. Imperva Cloud WAF is provisioned as a service enabling organizations to jumpstart their Web application security initiative in a matter of minutes. Imperva’s experienced security professionals provide around-the-clock monitoring, tuning, and security reports, so even businesses without dedicated security or IT staff can rest assured that their Web applications and data are safe.


Key Capabilities
Protect against Web Application attacks like SQL injection, XSS, and directory traversal
Achieve PCI 6.6 compliance quickly and cost-effectively
Avoid search engine blacklisting
Stop automated attacks like comment spam and site scraping
Improve Website performance through caching and compression
Leverage fully managed services provided by Imperva security experts


Imperva Cloud WAF Plans

Imperva Cloud WAF offers flexible subscription plans to meet specific business needs. Basic managed security services are included in each plan, providing organizations with continuous monitoring, policy tuning and incident response by Imperva security experts.

 Imperva
Cloud WAF 10
Imperva
Cloud WAF 20
Imperva
Cloud WAF 50
Imperva
Cloud WAF 100
Bandwidth: 10 Mbps 20 Mbps 50 Mbps 100 Mbps
Number of Websites: 1 1 3 5
Monthly overage charges will be assessed at $400 per month per 10 Mbps increment if bandwidth usage exceeds the Imperva Cloud WAF plan.

Optional Add-ons

In addition to the Imperva Cloud WAF bandwidth plans, Imperva offers additional service options.

  • Advanced Managed Security Service: This service offers expedited support with 2 hour critical incident response time and additional pro-active policy tuning. This service also includes 24x7 technical support for 5 Websites.
  • Additional 100 Mbps Bandwidth: Organizations may purchase extra bandwidth to be added to their base Imperva Cloud WAF plans. Bandwidth may be purchased in 1, 2, or 3 year subscriptions.
  • Additional 5 Websites: Imperva Cloud WAF includes protection for 1, 3, or 5 Websites depending on the service plan. Organizations that need to protect more than the default number of domains can purchase one or more subscriptions to protect additional Websites.

In addition to the Imperva Cloud WAF service options, customers can purchase the Imperva Cloud DDoS Protection service to prevent Distributed Denial of Service (DDoS) attacks. This service provides a cost-effective way to prevent DDoS attacks without incurring overage charges—customers subscribed to the Imperva Cloud DDoS Protection Service can avoid Imperva Cloud WAF overage charges because DDoS traffic is excluded from bandwidth calculations.

To learn more, click on the Capabilities tab.

Achieve PCI Compliance

If your Website processes payment cards, PCI 6.6 requires that you must either install a Web Application Firewall or review all Web applications annually and after all application changes. Imperva Cloud WAF provides continuous protection and helps you maintain PCI compliance in an affordable way.

Avoid Search Engine Blacklisting

Many legitimate Websites are added to the malware blacklists of security software firms, search engines, and browser makers due to application vulnerabilities. As a result, customers and partners may find their access to your Website blocked and your business effectively shut down. Imperva Cloud WAF enables you to close vulnerability gaps in your applications to avoid blacklisting and ensure your Website is always accessible.

Protect Against Web Application Attacks

Imperva Cloud WAF protects Websites and online applications against current and emerging threats, including SQL Injection, Cross-site Scripting (XSS), illegal resource access, malicious bots, and other OWASP Top 10 threats. Security experts behind the Imperva Cloud WAF managed service ensure optimum protection against newly discovered vulnerabilities to prevent disruption to your Website.

Improve Website Performance

Imperva Cloud WAF accelerates the performance of your Web applications, which results in faster Web page load times, reduced Web server workload, and lower Website bandwidth consumption, all without compromising your Website’s functionality.

Effortless Deployment

Imperva Cloud WAF does not require any hardware, software or changes to existing Web application code. Imperva Cloud WAF is provisioned as a service via a simple change to your Website’s DNS setting. This effortless deployment enables organizations to jumpstart their Web application security initiative while maintaining existing internet and Web hosting providers and infrastructure.

Centralized Threat Analysis

Imperva Cloud WAF protects your Website with collective knowledge about threats, including new emerging threats. Threat information is aggregated across the entire service network and used to identify new attacks as they happen and simultaneously apply mitigation rules to all Websites protected by Imperva Cloud WAF.

Lowest Total Cost of Ownership (TCO)

By leveraging a software-as-a-service (SaaS) delivery model, Imperva Cloud WAF provides businesses with the highest levels of Website security without requiring a large resource investment. Imperva Cloud WAF couples effortless deployment and dedicated security expertise with low annual costs to significantly reduce your capital expenditures and operational costs.

World-class Security Expertise

Imperva Cloud WAF provides organizations with continuous monitoring and policy tuning by world-class security experts leveraging expertise developed in creating the market leading Web Application Firewall. With Imperva Cloud WAF, organizations can free IT resources to perform other critical tasks by leveraging a dedicated team of Web security professionals.

Imperva Cloud WAF Specifications


Specification Description
Security
  • SQL Injection Prevention
  • Cross Site Scripting Prevention
  • Bad Bot Blocking
  • Illegal Access Prevention
  • Access Control By Country
  • Access Control By Visitor Type
  • Advanced Security Actions
  • Security Rule Fine Tuning
  • Support for HTTPS Sites
  • Threat Control Dashboard
Performance
  • Globally Distributed Network
  • Static Content Caching
  • Connection Optimization
  • Dynamic Content Compression
  • Content Minification
  • Advanced Dynamic Content Caching
Managed Security Service
  • Around-the-clock health monitoring
  • Threat alert email notifications
  • Performance notifications
  • Server outage notifications
  • Load vs. Response time analysis
  • Proactive security event management and response
  • Proactive policy tuning
  • Weekly reporting
  • Around-clock-support


Datasheets
White Papers
Related Products
Multimedia
Cloud WAF Trial
Get protected fast! Sign up for a FREE trial of Cloud WAF and rest easy knowing your website's security is monitored and managed by our experts 24/7.
Free Trial