Imperva

Imperva WAF uses patented dynamic application profiling and correlated attack validation to accurately detect attacks and minimize false positives. Dynamic application profiling learns all aspects of web applications, including the directories, URLs, parameters, and acceptable user inputs.

Correlated attack validation aggregates and analyzes individual violations across the stack. Combined, they detect attacks with exceptional accuracy and block only bad traffic. Imperva WAF protects against the most critical web application security risks: SQL injection, cross-site scripting, illegal resource access, remote file inclusion, and other OWASP Top 10 and Automated Top 20 threats. Imperva security researchers continually monitor the threat landscape and update Imperva WAF with the latest threat data.

Imperva WAF offers rich graphical reporting capabilities to easily understand security status and meet regulatory compliance. Impreva generates pre-defined and customizable reports. Quickly assess security status and streamline demonstration of compliance with PCI, SOX, HIPAA and FISMA and other compliance standards.

Imperva WAF integrates with most of the leading Security Information and Event Management (SIEM) systems such as Splunk, ArcSight, and others. It exports events as syslog messages, Common Event Format (CEF) and JSON format. Events generated by Imperva WAF are intuitively indexed and easily searchable for a quick incident response.

Impreva service is PCI-certified, highly customizable, SIEM ready and fine-tuned for blocking threats with minimal false positives. A simple-to-use GUI lets users configure rules according to their specific security needs based on signals, such as IP reputation, URL slug, client type, number of requests and geo-data.