On-Premises WAF

Web attacks deny services and steal sensitive data. Imperva SecureSphere Web Application Firewall (WAF) analyzes and inspects requests coming in to websites, mobile apps and APIs and stops these attacks.

Protect websites

Protect websites, mobile apps and APIs

SecureSphere WAF inspects and analyzes all requests to your websites, mobile applications and APIs and protects them from attacks aimed at exploiting vulnerabilities and automated attacks.

Minimal customer friction on WAF

Block with confidence

SecureSphere WAF uses patented dynamic application profiling to learn all aspects of a web application’s normal behavior, including: directories, URLs, parameters, and acceptable user inputs. Detects and blocks attacks with exceptional accuracy and blocks only bad traffic.

API Security

API security

SecureSphere WAF deployed in front of API resources protects core applications by validating and monitoring API traffic, and leveraging SecureSphere features like Profiling and Content Inspection to identify and protect against malicious activity. The SecureSphere API Security feature set includes the following:

  • Profiling and Protecting API Protocols
  • API Content Inspection
  • Blocking Malicious Bot Activity and DDoS
  • Enforcing API Encryption
  • Enforcing Specific API Versions
  • Tracking API Users
Virtual patching

Virtual patching for immediate remediation

SecureSphere WAF performs “virtual patching” for applications via vulnerability scanner integration. When a vulnerability is discovered, virtual patching actively protects applications instead of waiting for code to be modified. This reduces the window of exposure and lowers the costs of emergency fix cycles.

How Imperva SecureSphere WAF Works

Machine learning app profiling

Machine learning app profiling

Machine learning creates a positive security model of the application’s profile to avoid false-positives. SecureSphere dynamically learns normal application behavior and distinguishes it from the abnormalities of an attack.

Correlated attack validation

Correlated attack validation

Distinguishes attacks from unusual, but legitimate, behavior by correlating web requests across security layers, over time. Correlated attack validation examines protocol conformance, signatures, special characters, and user reputation to accurately alert or block attacks with the lowest rate of false positives.

Extensive reporting

Extensive reporting

Imperva WAF offers rich graphical reporting capabilities to easily understand security status and meet regulatory compliance. Generates pre-defined and customizable reports. Quickly assess security status and streamline demonstration of compliance with PCI, SOX, HIPAA and FISMA and other compliance standards.

SIEM integration

SIEM integration

SecureSphere WAF easily integrate with most of the leading Security Information and Event Management (SIEM) systems such as Splunk, ArcSight and others. SecureSphere WAF exports events as syslog messages, Common Event Format (CEF) and JSON format. SecureSphere WAF events are intuitively indexed and easily searchable for quick incident response.

Related Content

Key Resources

five ways imperva waf

Five Ways Imperva Beats WAF Competition

White Paper
Read Paper ›
What is Clickjacking?

Explainer Series: What is Clickjacking?

Blog
Read Blog ›