A cloud WAF that protects applications against all attacks wherever they're located; on-premises, in public or private cloud. Imperva cloud WAF is PCI-certified, customizable, SIEM-ready and tuned for blocking threats with minimal false-positives. Easy setup ensures rapid time to benefit.
WAF Gateway (On-premises & Customer-managed) ?
An appliance or virtual WAF that protects applications against attacks wherever they're located; on-premises, in public or private cloud. Imperva WAF gateways set the standard for protection, innovation, and customization. Dynamic profiling ensures any application is protected.
API Security
API Schema Protection ?
Protects APIs with an intuitive approach that enables security teams to establish positive security models using the OpenAPI specification.
API Discovery ?
Continuous, deep discovery of APIs throughout their lifecycle that provides full schema details with automatic classification of sensitive PII data deployed as an Add-on to Cloud WAF.
API Security Anywhere ?
Continuous, deep discovery of APIs throughout their lifecycle that provides full schema details with automatic classification of sensitive PII data deployed as a standalone solution for cloud-native and air-gapped environments.
Bot Protection
Client Classification ?
A multilayered system to block simple bots. Behavioral analysis, device fingerprinting, signature identification and transparent challenges combine to only allow legitimate users with low false positives.
Rate Limiting ?
Prevents automated bots from rapidly traversing through the website by applying rate limits.
CAPTCHA Insert ?
Inserts CAPTCHA test into the workflow to mitigate automated bot traffic.
Multi-factor Authentication ?
Inserts multi-factor authentication into the workflow to mitigate automated bot traffic. (All plans include 5 users. Enterprise and 360 allow for unlimited users.)
Account Takeover Detection ?
Detects credential stuffing and credential cracking advanced bots from performing account takeover attacks. A portion of the Advanced Bot Protection solution.
Advanced Bot Protection ?
Protects websites, mobile applications, and APIs from automated threats, known as bad bots, without affecting the flow of business-critical traffic. Includes Account Takeover Mitigation.
Client Side Protection
Client Side Protection - Detection ?
Detection of JavaScript services used in client-side attacks like formjacking, digital skimming, and Magecart.
Client Side Protection - Mitigation ?
Prevents JavaScript services from being used for data theft from client-side attacks like formjacking, digital skimming, and Magecart.
Runtime Protection
Runtime Application Self-Protection ?
Detects and blocks attacks from inside the application. Using patented LangSec techniques which treat data as code, RASP provides fast and accurate protection with no signatures and no learning mode.
Reporting & Analytics
SIEM Integration ?
Turnkey integrations with leading SIEM solutions.
Attack Analytics ?
A service that uses machine learning to distill thousands of events into a single, actionable attack narrative. Provides a single consolidated event feed from both cloud and on-premises application security.
Reputation Intelligence Feed ?
A security reputation feed that combines research from Imperva security researchers, live crowdsourced intelligence from millions of sites and threat intelligence from multiple partners.
Data Retention ?
The number of days the data will be available on the Imperva system.
DDoS Protection
Basic Website Protection ?
An always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency. Protects applications on-premises or in the cloud with activation via a simple DNS change.
Advanced Website Protection ?
An always-on DDoS mitigation service that manages any type, size or duration of attack with near-zero latency in under 3 seconds--backed by a service level agreement. Protects applications on-premises or in the cloud with activation via a simple DNS change.
Individual IP Protection ?
An always-on mitigation service that protects individual IP addresses against DDoS attacks.
DNS Protection
Managed DNS Protection ?
An Imperva hosted and secured DNS service providing optimal DNS availability and response time, combined with advanced DNS Zones protection. Ten DNS zones maximum in each package.
DNS Zones Protection ?
An always-on cloud mitigation service that protects DNS servers and provides optimal DNS performance with caching capabilities. Ten DNS zones maximum included in each package.
Content Delivery Network
Dynamic Content Acceleration ?
Network acceleration which boosts response times to the origin. Leverages adaptive routing to provide an optimized end user experience for dynamic content
Frontend Compression and Minification ?
Reduces file size and trims code to its bare essentials for faster delivery.
Session Optimization ?
Uses techniques like TCP connection pools and session reuse for faster content delivery.
Smart Caching ?
Intelligent profiling of content that determines cache frequency to optimize content for faster delivery.
Edge Cache Rules ?
Provides caching control with high granularity via programmable edge rules.
Origin Cache Shield ?
Cache Shield provides the Imperva CDN with an intermediate cache layer to optimize infrastructure capacity. The service protects origin servers from redundant requests, sending all requests to an automatically-selected point of presence (PoP).
Application Delivery
Edge Delivery Rules ?
Edge programmability for granular control of security, processing and delivery of the content.
Edge Load Balancing ?
A cloud-based load balancer that supports local and global server load balancing across on-premises and public cloud data centers. Supports automatic failover to standby servers enabling high-availability and disaster recovery without any TTL-related delays.
Waiting Room ?
The Waiting Room stops websites crashing during peak traffic periods by detecting abnormal increases in traffic and giving you the controls to redirect site visitors into a virtual queue until it is their turn to access your site.
Services
Advanced Reporting ?
This suite of reports highlights strengths, weaknesses, risk levels, and improvement opportunities within your implementation. Provides insight into your Application Security solution, and helps you understand your level of attack readiness and security posture.
Proactive Monitoring ?
Imperva provides proactive notifications with insights into protected assets and recommended actions using statistical analysis of anomalous security events and suspicious use cases, as well as monitoring configuration changes that impact security posture.
Enterprise Services ?
Staff augmentation by a team of Imperva security experts who provide ongoing consultation and operational assistance such as onboarding, optimization, customization, and integration. Also includes access to Premium Support and Training resources.
NTT required a solution that had a global track record of adoption, operability that reduces operating load, availability that achieves stable operation, ease of implementation, usage not as an asset but as a service, and monthly payable usage fees.
I believe it is the best cloud WAF. After implementing Imperva, countermeasures against specific threats have been off our radar in a good sense.
Imperva Data Risk Analytics dramatically reduced the volume of security alerts, speeding incident resolution, and improved staff effectiveness by spotting critical data access problems.
Imperva helps my team keep up with risk mitigation issues for a massive amount of business data every day.
Director of Security Operation at leading financial services company
Schedule Demo
The State of Security Within eCommerce in 2022
Learn how automated threats and API attacks on retailers are increasing
