Collaborate Disseminate
Gartner has published its 2019 Gartner Magic Quadrant for Web Application Firewalls (WAF) and Imperva has been named a Leader for the sixth consecutive year! Along with our WAF Gateways and easy-to-deploy Cloud WAF we recently added API Security, RASP,… Continue reading A Leader in the 2019 Gartner Magic Quadrant for WAF, Six Years Running
My organisation is adding a firewall to our test stacks, using AWS WAF. We’d like to whitelist all traffic from the SDKs we’ve built to facilitate requests between our services.
We thought of doing this using a custom ‘X-‘ … Continue reading ‘Hard-to-guess’ custom header (or similar) to whitelist via a firewall
I am looking into putting a Firewall in front of our web servers. But we just recently implemented new next-gen firewalls. Does it make sense to put a WAF in front of our web servers as well?
Is it enough to rely on a web application firewall for protection against SQL injection? or should I use other techniques?
During a conversation with a friend he said it is enough to use web application firewall which I disa… Continue reading Is a web application firewall enough to defend against sql injection? or should I use prepared statements?
I want to block the view of the images and video in web and mobile app. For the web, I have managed access with WAF and added the API server as a trusted domain. But in the Mobile App, the header referral is empty and unable … Continue reading What are the suggested way to protect content in mobile app
Companies that connect to and conduct business online—essentially all businesses at this point—understand the need for web security. A content delivery network (CDN)-based web application firewall (WAF) provides the easiest way to set up basic web app… Continue reading Hybrid vs. Cloud-Based Web Security: Anatomy of a Breach
On Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years. Continue reading What We Can Learn from the Capital One Hack
Given the fact that I have a WAF already deployed, what is the benefit I could get by purchasing a SAST tool that would scan the engineers’ code for security flaws?
Does this also apply for SCA tools where they can alert in … Continue reading SAST vs WAF: What should I choose?
I guess these wafs nowdays getting older, can be easily detected, blacklists are not useful anymore since we have whitelists. And it isn’t a great option if we have to face more advanced attackers/attacks.
In my two-plus years as a Technical Support Engineer at Imperva, I’ve handled a wide variety of customer cases. And I’ve had the satisfaction of helping resolve them quickly and successfully. But never before have I received a handwritten t… Continue reading Personalized Customer Support that Garners a Personalized Thank You