-
Products
- Solutions
-
Explore FlexProtect
- Support
- Partners
![New product hero bg]()
Home > FlexProtect Plans
FlexProtect
- Cost-efficient
- Integrated
- Secure
Application security
FlexProtect Plus
Learn moreFlexProtect Premier
Learn moreComplete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Maximum data and application security that gives you all that Imperva has to offer.
Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.Reputation IntelligenceA security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.Advanced Bot Protection (inc. ATO)Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.DDoS Protection for WebsitesAn always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change.Add-on
DDoS Protection for NetworksAn on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.Runtime Application Self-ProtectionDetects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.Client-Side ProtectionPrevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.Data security
Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.Data MaskingDe-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.< >FlexProtect Plus
Learn moreComplete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Application security
Web Application Firewall
- Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
- API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
- SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.
- Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.
Analytics
- Reputation Intelligence A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
- Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Application Delivery
- Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.
- Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.
- Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
- Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.
Bot Protection
- Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
- CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.
- Advanced Bot Protection (inc. ATO)
Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.
DDoS
- DDoS Protection for Websites
Add-on
An always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change. - DDoS Protection for Networks
An on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.
RASP
- Runtime Application Self-Protection
Detects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Client-Side Protection
- Client-Side Protection
Prevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.
Data security
Discovery and Assessment
- Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.
- Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.
Data Protection
- Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.
- Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.
- User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.
Analytics
- Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.
Cloud Data Security
- Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.
Data Masking
- Data Masking
De-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.
< >FlexProtect Premier
Learn moreMaximum data and application security that gives you all that Imperva has to offer.
Application security
Web Application Firewall
- Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
- API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
- SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.
- Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.
Analytics
- Reputation Intelligence A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
- Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Application Delivery
- Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.
- Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.
- Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
- Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.
Bot Protection
- Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
- CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.
- Advanced Bot Protection (inc. ATO)Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.
DDoS
- DDoS Protection for WebsitesAn always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change.
- DDoS Protection for Networks
An on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.
RASP
- Runtime Application Self-ProtectionDetects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Client-Side Protection
- Client-Side ProtectionPrevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.
Data security
Discovery and Assessment
- Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.
- Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.
Data Protection
- Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.
- Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.
- User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.
Analytics
- Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.
Cloud Data Security
- Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.
Data Masking
- Data MaskingDe-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.
Application security
Simple, easy and effective application security delivered as-a-service.
Complete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Maximum data and application security that gives you all that Imperva has to offer.
Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.Reputation IntelligenceA security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.Add-on
Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.Advanced Bot Protection (inc. ATO)Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.DDoS Protection for WebsitesAn always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change.Add-on
Add-on
DDoS Protection for NetworksAn on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.Runtime Application Self-ProtectionDetects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.Client-Side ProtectionPrevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.Application security
Web Application Firewall
- Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
- API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
- SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.
- Web Application Firewall Gateway
An appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.
Analytics
- Reputation Intelligence A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
- Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Application Delivery
- Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.
- Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.
- Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
- Load Balancing
Add-on
A cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.
Bot Protection
- Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
- CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.
- Advanced Bot Protection (inc. ATO)
Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.
DDoS
- DDoS Protection for Websites
Add-on
An always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change. - DDoS Protection for Networks
An on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.
RASP
- Runtime Application Self-Protection
Detects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Client-Side Protection
- Client-Side Protection
Prevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.
< >FlexProtect Plus
Learn moreComplete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Application security
Web Application Firewall
- Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
- API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
- SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.
- Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.
Analytics
- Reputation Intelligence A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
- Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Application Delivery
- Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.
- Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.
- Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
- Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.
Bot Protection
- Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
- CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.
- Advanced Bot Protection (inc. ATO)
Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.
DDoS
- DDoS Protection for Websites
Add-on
An always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change. - DDoS Protection for Networks
An on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.
RASP
- Runtime Application Self-Protection
Detects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Client-Side Protection
- Client-Side Protection
Prevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.
< >FlexProtect Premier
Learn moreMaximum data and application security that gives you all that Imperva has to offer.
Application security
Web Application Firewall
- Cloud Web Application FirewallA cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
- API SecurityProtects websites and APIs with an intuitive single stack approach. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
- SIEM IntegrationIntegration with leading Security Information and Event Management (SIEM) systems, including Splunk, ArcSight, QRadar and more.
- Web Application Firewall GatewayAn appliance or virtual WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected no matter how complex or unique.
Analytics
- Reputation Intelligence A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
- Attack AnalyticsA service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Application Delivery
- Content Delivery NetworkA CDN that uses intelligent caching and cache control options, as well as high-speed storage and optimization tools to improve website performance while lowering bandwidth costs.
- Dynamic Content AccelerationNetwork acceleration which boosts response times to the origin. Leverages flexible routing to provide an optimized end user experience.
- Cache ShieldCache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
- Load BalancingA cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers to enable high-availability and disaster recovery without any TTL-related delays.
Bot Protection
- Client ClassificationA multilayered system to block malicious traffic. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
- CAPTCHA InsertionInserts CAPTCHA test into the workflow to mitigate automated bot traffic.
- Advanced Bot Protection (inc. ATO)Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic.
DDoS
- DDoS Protection for WebsitesAn always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change.
- DDoS Protection for Networks
An on-demand or always-on mitigation service that protects your network infrastructure against DDoS attacks.
RASP
- Runtime Application Self-ProtectionDetects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Client-Side Protection
- Client-Side ProtectionPrevents data theft from client-side attacks like formjacking, digital skimming, and Magecart.
Data Security
Data Secure
Learn moreData 360
Learn moreProtect data and demonstrate compliance wherever it lives in the enterprise.
Maximize the value of your data security with correlation, analytics, and automation for SOC and Compliance teams.
Data Discovery and ClassificationDiscover unknown databases by scanning your enterprise network. Identifies sensitive data such as credit card numbers or national identification numbers.Vulnerability Assessment and User Rights ManagementScan databases for vulnerabilities, misconfigurations, and user access rights. Provide remediation recommendations across heterogeneous data stores.Data Protection PolicyContinuously monitor data and account activity, across on-premises and cloud environments. Alert or block on security or compliance policy violations.Behavior AnalyticsDetect insider threats, compromised users, and data exfiltration with out of the box User and Entity Behavior Analytics (UEBA).High Performance ReportingOptimize productivity and quickly identify audit gaps by using a single repository for all reporting needs across years of historical data.Advanced Data Enrichment & CorrelationImprove the security value of the data sent to your SOC and SIEM teams by correlating with identity and access management to add clarity to events.Extensible User & Entity Behavior Analytics (UEBA)Adapt User and Entity Behavior Analytics (UEBA) through correlation with third-party feeds, adjust the existing models, or even write your own.Compliance & Security AutomationOrchestrate and automate manual operations by creating workflows for data-centric events to respond without any additional tools.SIEM/SOC Optimization & Cost ReductionReduce SIEM data consumption and long-term storage costs without compromising access to the data or the user experience.Flexible Analytics and VisualizationDeliver self-service reporting within the tools already used by the SOC, Compliance, DBA, and Forensics teams.Integrated Data SOARDevelop playbooks that extend into third-party security orchestration automation and response (SOAR) systems to take actions in other security and IT tools.Data security
FlexProtect Plus
Learn moreFlexProtect Premier
Learn moreComplete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Maximum data and application security that gives you all that Imperva has to offer.
Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.Data MaskingDe-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.Data Security
Data Security (new)
- Data Discovery and ClassificationDiscover unknown databases by scanning your enterprise network. Identifies sensitive data such as credit card numbers or national identification numbers.
- Vulnerability Assessment and User Rights ManagementScan databases for vulnerabilities, misconfigurations, and user access rights. Provide remediation recommendations across heterogeneous data stores.
- Data Protection PolicyContinuously monitor data and account activity, across on-premises and cloud environments. Alert or block on security or compliance policy violations.
- Behavior Analytics Detect insider threats, compromised users, and data exfiltration with out of the box User and Entity Behavior Analytics (UEBA).
- High Performance ReportingOptimize productivity and quickly identify audit gaps by using a single repository for all reporting needs across years of historical data.
- Advanced Data Enrichment & Correlation
Improve the security value of the data sent to your SOC and SIEM teams by correlating with identity and access management to add clarity to events.
- Extensible User & Entity Behavior Analytics (UEBA)
Adapt User and Entity Behavior Analytics (UEBA) through correlation with third-party feeds, adjust the existing models, or even write your own.
- Compliance & Security Automation
Orchestrate and automate manual operations by creating workflows for data-centric events to respond without any additional tools.
- SIEM/SOC Optimization & Cost Reduction
Reduce SIEM data consumption and long-term storage costs without compromising access to the data or the user experience.
- Flexible Analytics and Visualization
Deliver self-service reporting within the tools already used by the SOC, Compliance, DBA, and Forensics teams.
- Integrated Data SOAR
Develop playbooks that extend into third-party security orchestration automation and response (SOAR) systems to take actions in other security and IT tools.
< >Data 360
Learn moreMaximize the value of your data security with correlation, analytics, and automation for SOC and Compliance teams.
Data Security
Data Security (new)
- Data Discovery and ClassificationDiscover unknown databases by scanning your enterprise network. Identifies sensitive data such as credit card numbers or national identification numbers.
- Vulnerability Assessment and User Rights ManagementScan databases for vulnerabilities, misconfigurations, and user access rights. Provide remediation recommendations across heterogeneous data stores.
- Data Protection PolicyContinuously monitor data and account activity, across on-premises and cloud environments. Alert or block on security or compliance policy violations.
- Behavior Analytics Detect insider threats, compromised users, and data exfiltration with out of the box User and Entity Behavior Analytics (UEBA).
- High Performance ReportingOptimize productivity and quickly identify audit gaps by using a single repository for all reporting needs across years of historical data.
- Advanced Data Enrichment & CorrelationImprove the security value of the data sent to your SOC and SIEM teams by correlating with identity and access management to add clarity to events.
- Extensible User & Entity Behavior Analytics (UEBA)Adapt User and Entity Behavior Analytics (UEBA) through correlation with third-party feeds, adjust the existing models, or even write your own.
- Compliance & Security AutomationOrchestrate and automate manual operations by creating workflows for data-centric events to respond without any additional tools.
- SIEM/SOC Optimization & Cost ReductionReduce SIEM data consumption and long-term storage costs without compromising access to the data or the user experience.
- Flexible Analytics and VisualizationDeliver self-service reporting within the tools already used by the SOC, Compliance, DBA, and Forensics teams.
- Integrated Data SOARDevelop playbooks that extend into third-party security orchestration automation and response (SOAR) systems to take actions in other security and IT tools.
< >FlexProtect Plus
Learn moreComplete data and application security that lets you deploy protection when and where you need it - on-premises or in the cloud.
Data security
Discovery and Assessment
- Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.
- Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.
Data Protection
- Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.
- Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.
- User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.
Analytics
- Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.
Cloud Data Security
- Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.
Data Masking
- Data Masking
De-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.
< >FlexProtect Premier
Learn moreMaximum data and application security that gives you all that Imperva has to offer.
Data security
Discovery and Assessment
- Data Discovery and ClassificationDiscovers unknown databases by scanning your enterprise network for database services and servers. Identifies sensitive data such credit card numbers or national identification numbers.
- Database Vulnerability AssessmentsScans databases for vulnerabilities and misconfigurations such as default passwords. Provides detailed reports including recommended remediation steps.
Data Protection
- Data Activity MonitoringContinuously monitors database transactions, including local privileged user and service account activity. Provides enterprise-wide visibility of database activity across supported on-premises and cloud environments. Alerts or blocks on security or compliance policy violations. Demonstrate compliance with pre-defined and custom reports.
- Data Security GatewaysA virtual appliance that continuously monitors database activity. Imperva data security gateways set the standard for scalability, reliability and performance. Imperva data security gateways can be deployed on-premises and in public or private clouds.
- User Rights ManagementAggregates, correlates and reports on user access rights across heterogeneous enterprise databases.
Analytics
- Data Risk AnalyticsIdentifies dangerous data access activity that exposes sensitive data to breach risk. Uses machine learning, data science and behavior analytics to analyze and distill millions of database events into a few, actionable incidents.
Cloud Data Security
- Cloud Data SecurityAn industry-first SaaS cloud data security solution that allows you to on-board in minutes and obtain instant visibility of your cloud data, with automated discovery, classification, continuous monitoring, and security insights.
Data Masking
- Data MaskingDe-identifies, anonymizes, and pseudonymizes sensitive data within non-production environments such application development, testing, analysis, and more. Data masking helps de-risk non-production environments and addresses many data privacy and protection regulations such as GDPR.
![image@2x 1]()
“We now spend less time on issues such as software changes and can direct more energy on protecting our members’ data company information“
Sharon BlackSr. Manager of Information Security
![blue cross blue shield vector logo]()
![image@2x 1]()
“Increasing the visibility into threats allows us to make informed decisions into securing our environment.”
Edward MessinaIT Security and Risk Manager
![monash logo mono light]()
Start your free demo
“Imperva prevented 10,000 attacks in the first 4 hours of Black Friday weekend with no latency to our online customers.”
Top 3 US Retailer
Thank you!
An Imperva security specialist will contact you shortly.
Learn how FlexProtect Plus fits your security and budget needs.
Thank You!An Imperva security specialist will contact you shortly.
- Support
