Home Data Protection & DLP Imperva

OFFICIAL PARTNER · CYBER BOOST

Imperva

Name: Imperva
Brand: Imperva

Application & Data Security Platform

Imperva is a global leader in protecting web applications, APIs and databases. One platform covers Cloud WAF, DDoS protection, Bot Protection and Data Security. Imperva has been part of the Thales group since 2023.

WAF API Security DDoS Protection Bot Management DB Security

Request a demo See the modules

KEY FACTS

$3.6B

Thales deal (2023)

150+

points of presence (PoPs)

Leader

Gartner MQ for WAAP

2002

year founded (California)

Part of Thales Cyber Security Products

PRODUCTS AND MODULES

What the platform includes.

Imperva Application Security and Data Security together protect web applications, APIs and databases.

Cloud WAF

Imperva Cloud WAF

A cloud Web Application Firewall with OWASP Top 10 protection, virtual patching and automatic rules from Imperva Research Labs.

On-Prem WAF

Imperva WAF Gateway

A hardware or virtual WAF for on-prem deployment. Full control of traffic inside your own perimeter.

API Security

Imperva API Security

Discovery and protection of REST/GraphQL/SOAP APIs. An inventory of shadow and zombie APIs and protection against the OWASP API Top 10.

DDoS Protection

Imperva DDoS Protection

Cloud L3-L7 DDoS protection with an SLA of <3 seconds. Always-on or on-demand mitigation.

Bot Management

Advanced Bot Protection

Protection against scraping, credential stuffing and account takeover. ML-based bot classification and behavioral analytics.

RASP

Imperva RASP

Runtime Application Self-Protection: protects Java, .NET and Node.js applications from the inside.

DB Security

Imperva Data Security Fabric

Database protection: auditing, classification of sensitive data, DAM, anomaly detection.

CDN

Imperva CDN

A global CDN with integrated WAF and DDoS protection. Caching, image optimization, HTTP/3.

Attack Analytics

Imperva Attack Analytics

ML groups WAF events, so thousands of alerts become a few dozen real incidents with context.

CAPABILITIES

Key capabilities.

OWASP Top 10

Full protection against injection, XSS, broken authentication and other OWASP Top 10 threats. Automatic signatures.

Virtual Patching

Virtual patches close vulnerabilities before an official fix is released. They also protect legacy applications.

SLA <3 sec

DDoS mitigation SLA: less than 3 seconds from detection to full blocking.

Account Takeover

Behavioral analytics detects and blocks credential stuffing and account takeover attacks.

API Discovery

Automatic discovery of all APIs: shadow, zombie and undocumented. Inventory and risk scoring.

DAM

Database Activity Monitoring: auditing of queries to Oracle, MS SQL, MySQL, PostgreSQL, MongoDB and more.

PCI DSS 6.6

A certified solution for PCI DSS requirement 6.6: protecting payment web applications.

CDN-acceleration

The global CDN speeds applications up and protects them at the same time. HTTP/3 and Brotli out of the box.

USE CASES

Who uses Imperva and how.

Banks and fintech

Protecting online banking from credential stuffing, fraud and DDoS. A PCI DSS-certified WAF.

E-commerce

Bot Protection against scraping of prices and inventory. Protecting checkout pages from card fraud.

API-first companies

An inventory of all public and internal APIs, discovery of shadow and zombie endpoints.

Public sector

Protecting public government portals from DDoS and auditing databases that hold personal data.

Media and publishing

CDN acceleration, protection against DDoS at peak load and against content-scraping bots.

Compliance

Ready-made PCI DSS, HIPAA, GDPR and SOX reports. A certified PCI DSS 6.6 solution.

DEPLOYMENT OPTIONS

Cloud, on-prem or hybrid.

CLOUD WAF

Imperva Cloud

A reverse-proxy SaaS WAF. No agents and no devices: just point DNS to Imperva.

Fast launch
CDN + DDoS out of the box
150+ PoPs worldwide

ON-PREM

WAF Gateway

Hardware or virtual appliances in your own data center. Inline or reverse proxy.

Full control of traffic
Data localization
Air-gapped environments

HYBRID

Hybrid Mgmt

Cloud protection for public services and an on-prem WAF for internal ones, managed from one console.

A single policy
Gradual migration
Shared analytics

$3.6B

Thales deal (2023)

150+

points of presence (PoPs)

2002

year founded

Leader

Gartner MQ for WAAP

INTEGRATIONS

Imperva integrations.

SIEM AND SOC

SplunkIBM QRadarMicrosoft SentinelTrellix Helix

CLOUDS

AWSMicrosoft AzureGoogle Cloud

DATABASES

OracleMS SQL ServerMySQL / MariaDBPostgreSQLMongoDBSAP HANA

DEVOPS AND CI/CD

TerraformKubernetesJenkinsGitLab CI

COMPARING MODULES

Which module to choose.

Capability	Cloud WAF	WAF Gateway	API Security	DB Security
Web application protection	✓	✓	-	-
REST/GraphQL API protection	Basic	Basic	✓	-
DDoS L3-L7	✓	L7 only	-	-
Bot Management	✓	Add-on	-	-
CDN acceleration	✓	-	-	-
Database auditing (DAM)	-	-	-	✓
PCI DSS 6.6	✓	✓	-	-
Deployment	SaaS	On-Prem	SaaS / On-Prem	On-Prem / Cloud

Get help choosing modules

FAQ

Frequently asked questions

How is Imperva connected to Thales now?

In December 2023, Thales completed the acquisition of Imperva for $3.6B. Imperva became part of the Thales Cyber Security Products division, keeping its brand and product line.

Cloud WAF or On-Prem Gateway?

Cloud WAF suits public web services: it is quick to set up and comes with CDN and DDoS protection. The On-Prem Gateway suits internal applications, regulated industries and isolated network segments.

Does Imperva protect REST and GraphQL APIs?

Yes. Imperva API Security discovers API endpoints (including shadow and zombie APIs) and protects against the OWASP API Top 10, BOLA, broken authentication and excessive data exposure.

What is DSF?

Data Security Fabric is a platform for protecting databases and cloud data stores. It includes auditing, classification of sensitive data, DAM and detection of anomalous access.

← All vendors: Data Protection & DLP

Vendors in Data Protection.

Network · Email · Backup

REQUEST

Request an Imperva demo

We reply within one business day.