Rethink architecture, without overlooking security
Security at pace of development
Mitigate vulnerabilities within your serverless functions in order to prioritize business logic without drowning in technical debt.
Protection from within
Imperva Serverless Protection embeds itself into the function in order to defend against new attack vectors emerging in serverless functions.
Secure Serverless functions, fast
- Comprehensive visibility
- Automated mitigation
- Security at the speed of development
- Protection from OWASP serverless attacks
- Mitigation of Zero Day threats
Protects Serverless functions from:
Attacks
- HTTP Response Splitting
- HTTP Method Tampering
- Large Requests
- Malformed Content Types
- Path Traversal
- Unvalidated Redirects
Injections
- Command Injection
- Cross-Site Scripting
- Cross-Site Request Forgery
- Database Access Violation
- CSS & HTML Injection
- JSON & XML Injection
- OGNL Injection
- SQL Injection
Weaknesses
- Logging Sensitive Information
- Unauthorized Network Activity
- Uncaught Exceptions
- Weak Browser Caching
- Weak Cryptography
- Weak Authentication
- Vulnerable Dependencies
- Insecure Cookies & Transport
Comprehensive attack visibility
Logging & visibility
- Attack Classification Category, Event, Severity
- Network HTTP Request, HTTP Response, IP Addresses, Hosts Info
- Application User session, code execution, Filename, Line Number
- Operating System File reads/writes, Process Execution
- Database Query Execution, Modified Rows via Execution


Supported platforms
Runtimes


Cloud

Robust security at the speed of development
Security for DevOps
Gain the benefits of serverless architecture without compromising on security.
Deny by default
A positive security model enables organizations to not only have visibility over vulnerabilities, but protection as well.


See how we can help you secure your web applications and data