Protect Your Critical Web Applications and Data

Imperva SecureSphere Web Application Firewall analyzes all user access to your business-critical web applications and protects your applications and their data from attacks. SecureSphere Web Application Firewall dynamically learns your applications' "normal" behavior and correlates this with the industry's leading threat intelligence for web applications to deliver superior protection.

SecureSphere Web Application Firewall identifies and acts upon dangers maliciously woven into innocent-looking website traffic; traffic that slips right through traditional defenses. This includes application vulnerability attacks such as SQL injection, cross-site scripting and remote file inclusion; business logic attacks such as site scraping and comment spam; and fraudulent activity like account takeover attacks.

CORRELATED ATTACK VALIDATION

SecureSphere Security

SecureSphere Correlated Attack Validation provides exceptional accuracy to block only bad parties, while eliminating impact to legitimate customers. SecureSphere mitigates both technical attacks such as DDoS and SQL injection, as well as non-technical attacks such as comment spamming and site scraping.

FLEXIBLE DEPLOYMENT OPTIONS

SecureSphere Security

SecureSphere can be deployed as a physical appliance, a virtual appliance, via Amazon Web Services, or as a hybrid of these. Physical appliance deployments are particularly flexible in that they allow SecureSphere to run transparently, requiring virtually no changes to the customer's network. And granular policy controls enable superior accuracy and unequaled control to match each organization's specific protection requirements.

DEEP THREAT INTELLIGENCE

SecureSphere Security

SecureSphere defenses are built using ongoing threat analysis from the renowned dedicated Imperva Application Defense Center (ADC) research department. This knowledge is augmented by an extensive partner ecosystem, including integration with SEIMs, vulnerability scanners, and fraud vendors.

VIRTUAL PATCHING

SecureSphere Security

SecureSphere can perform "virtual patching" for your web applications via vulnerability scanner integration. Instead of leaving a web application exposed to attack for weeks or months while code is modified after discovering a vulnerability, Virtual patching actively protects web applications from attacks to reduce the window of exposure, and decreases the costs of emergency fix cycles until you are able to patch them.

EXTENSIVE REPORTING CAPABILITIES

SecureSphere features customizable reports to facilitate compliance and forensics, and ongoing monitoring for in-depth analysis of attacks during and after the fact. This enables you to quickly assess your security status and streamline demonstration of compliance with PCI, SOX, HIPAA and FISMA and other compliance standards.

  • Web Application Security Datasheet
    Download Datasheet
  • 2015 Gartner Magic Quadrant for Web Application Firewalls
    Access Report
  • The Future of Web Security:
    10 Things Every Web Application Firewall Should Provide
    Learn More
  • Web Attack Survival Guide White Paper
    Learn More
  • How to Stop Web Attacks On-Demand Webinar
    Learn More