Imperva SecureSphere | Web Application Firewall
Protect Your Critical Web Applications and Data
Imperva SecureSphere Web Application Firewall analyzes all user access to your business-critical web applications and protects your applications and their data from attacks. SecureSphere Web Application Firewall dynamically learns your applications’ “normal” behavior and correlates this with the industry’s leading threat intelligence for web applications to deliver superior protection.
SecureSphere Web Application Firewall identifies and acts upon dangers maliciously woven into innocent-looking website traffic; traffic that slips right through traditional defenses. This includes application vulnerability attacks such as SQL injection, cross-site scripting and remote file inclusion; business logic attacks such as site scraping and comment spam; and fraudulent activity like account takeover attacks.
SecureSphere Correlated Attack Validation provides exceptional accuracy to block only bad parties, while eliminating impact to legitimate customers. SecureSphere mitigates both technical attacks such as DDoS and SQL injection, as well as non-technical attacks such as comment spamming and site scraping.
SecureSphere can be deployed as a physical appliance, a virtual appliance, via Amazon Web Services, or as a hybrid of these. Physical appliance deployments are particularly flexible in that they allow SecureSphere to run transparently, requiring virtually no changes to the customer’s network. And granular policy controls enable superior accuracy and unequaled control to match each organization’s specific protection requirements.
SecureSphere defenses are built using ongoing threat analysis from the renowned dedicated Imperva Application Defense Center (ADC) research department. This knowledge is augmented by an extensive partner ecosystem, including integration with SEIMs, vulnerability scanners, and fraud vendors.
SecureSphere can perform “virtual patching” for your web applications via vulnerability scanner integration. Instead of leaving a web application exposed to attack for weeks or months while code is modified after discovering a vulnerability, Virtual patching actively protects web applications from attacks to reduce the window of exposure, and decreases the costs of emergency fix cycles until you are able to patch them.
SecureSphere features customizable reports to facilitate compliance and forensics, and ongoing monitoring for in-depth analysis of attacks during and after the fact. This enables you to quickly assess your security status and streamline demonstration of compliance with PCI, SOX, HIPAA and FISMA and other compliance standards.