Imperva Web Application Firewall

by Imperva (Thales)

WAF for web apps and APIs that blocks OWASP Top 10 attacks with managed rules and near-zero false positives.

Visit website

Application & API Security

Starting priceContact for pricing

Pricing modelcustom

DeploymentCloud WAF (SaaS); WAF Gateway (on-premises); Elastic WAF (Kubernetes); public cloud, private cloud and hybrid

Free trialYes

About

WAF for web apps and APIs that blocks OWASP Top 10 attacks with managed rules and near-zero false positives.

Imperva Web Application Firewall protects web applications and APIs from attacks such as SQL injection, cross-site scripting and other OWASP Top 10 threats. Imperva states that it delivers near-zero false positives, backed by a global SOC that creates and tests new rules in production so teams can run in block mode with confidence.

It integrates bot protection, API security and machine learning, and Attack Analytics correlates alerts into single incident narratives. Teams can deploy it as Cloud WAF, WAF Gateway or Elastic WAF across public cloud, private cloud, hybrid and on-premises environments, and automate setup through a Terraform provider. A free trial is available for Imperva Cloud WAF.

Key features

Near-zero false positives; Managed rules from Imperva Threat Research; Attack Analytics incident correlation; Terraform provider automation; Enterprise SSL management; Upload scan and control; Bot protection and API security; Compliance logging and auditing

Product details

Vendor

Imperva (Thales)

Pricing

Contact for pricingFree trial available

Pricing model: custom

Visit website for full pricing details

Similar software

42Crunch

by 42Crunch

API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.

Contact for pricing

Aikido Security

by Aikido Security

Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.

Free; Basic $350/month

Akamai API Security

by Akamai Technologies

API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.

Contact for pricing

Barracuda WAF-as-a-Service

by Barracuda Networks

Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.

Contact for pricing

Black Duck Polaris

by Black Duck

Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.

Consumption-based pricing

Burp Suite Professional

by PortSwigger

Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.

Professional $499