WP RASP Market Leader | Secure all Applications by Default | Imperva

Home > Runtime Application Self-Protection (RASP) 

Runtime Application Self-Protection (RASP)

Imperva RASP protects your applications from the inside out.

Schedule Demo
image description

Protect applications from within

Application risk reduction

risk reduction icon

RASP protects your application from vulnerabilities so that your teams can focus on business logic, without leaving your application exposed to potential exploitation

Security as business transforms

scalable icon

With fading controls and ephemeral workloads, cloud native applications need more than just perimeter security. RASP provides security from within and goes wherever your application goes

RASP Attack Detection

Built into the application runtime environment, RASP is capable of detecting and preventing attacks real-time

  • Protection against zero-day attacks.
  • No tuning, highly-accurate out-of-the-box.
  • Protects against OWASP top 10 vulnerabilities.
Schedule DemoorLearn More

What does RASP protect against?

Attacks

  • Clickjacking
  • HTTP Response Splitting
  • HTTP Method Tampering
  • Large Requests
  • Malformed Content Types
  • Path Traversal
  • Unvalidated Redirects
  • Software Supply Chain Attacks

Injections

  • Command Injection
  • Cross-Site Scripting image description
  • Cross-Site Request Forgery image description
  • CSS & HTML Injection image description
  • Database Access Violation
  • JSON & XML Injection image description
  • OGNL Injection image description
  • SQL Injection image description

Weaknesses

  • Insecure Cookies & Transport image description
  • Logging Sensitive Information
  • Unauthorized Network Activity
  • Uncaught Exceptions
  • Vulnerable Dependencies image description
  • Weak Authentication image description
  • Weak Browser Caching
  • Weak Cryptography image description
Schedule DemoorLearn More

WAF + RASP = Defense in Depth

web application firewall

WAF

For known exploit payloads

  • Attacks DDoS, malicious bots,
    script kiddies
  • Threats External/untrusted
rasp 2

RASP

For unknown payloads

  • Attacks obfuscated, context-dependent, Zero-day
  • Threats External/untrusted,
    Trusted insider, partners
attack threat

Zero-day protection

Using patented grammar-based techniques, RASP allows applications to defend themselves without signatures or patches- providing security by default and sparing you the operational costs of off-cycle 0-day patching.

Learn about Zero-day exploits
cloud security

Cloud native application protection

With fading controls and ephemeral workloads, cloud native applications need more than just perimeter security. RASP provides security from within and goes wherever your application goes.

Learn more
insider threat 1

Insider threat protection

Attached to the runtime, RASP sees east-west traffic within applications even from careless and malicious insiders.

Learn more

Attack Visibility

  • Pre-correlated Intelligence Everything in one place.
  • Attack Classification Category, Event, Severity
  • Network HTTP Request, HTTP Response, IP Addresses, Hosts Info
  • Application User session, code execution, Filename, Line Number
  • Operating System File reads/writes, Process Execution
  • Database Query Execution, Modified Rows via Exeuction
logging and visibility
logging and visibility

Runtimes

Databases

Insights & SIEMs

Case Study

AARP

AARP approached Prevoty (now part of Imperva) for a RASP solution to protect the organization’s Amazon Web Services (AWS) hosted applications from attacks in its production environments

  • Evaluation

    Technology nimble enough to accommodate future architectural changes

  • Seamless integration

    RASP integrates itself into development pipeline and automated workflows easily

  • Permanent patching

    RASP fills security gaps in stacks that leave applications vulnerable at runtime

  • Results

    Applications deployed faster, at scale, and with security onboard

AARP is always looking beyond conventional information security controls and the rapid implementation of RASP enabled us to instill confidence that we are exceptional stewards in protecting member data.

aarp 1
Saffet Ozdemir VP of Information Security Full Customer Story

RASP goes everywhere and works anywhere

  • browser

    Active Applications
  • time

    Legacy Applications
  • ldap authentication

    3rd Party Applications
  • apps microservices

    APIs & Microservices
  • multi cloud

    Cloud Applications
  • web proxy

    Container & VMs

Additional Resources

Watch Next

wafandrasp1 1

Imperva WAF & RASP

Discover in this video how you can succeed in fine-tuning your Imperva WAF when coupled with Imperva’s RASP.

related resources
Mitigate Vulnerabilities in Application Code Without Emergency Patching
WebinarMitigate Vulnerabilities in Application Code Without Emergency Patching
aarp company logo 1
Case_studyAARP
Webinar-RASP has WAF's back
WebinarRASP has your WAF’s back: Protect against zero days by default
From our blog
Blog image 11a
API Gateway or not, You Need API Security
Bruce Lynch■Mar 24■4min read
Blog image 20a
Imperva Mitigates Ransom DDoS Attack Measuring 2.5 Million Requests per Second
Nelli Klepfish■Mar 4■4min read
Related products
Web Application Firewall (WAF)
Imperva Plans