Media Contact: 
Anne Trapasso
312-552-6327
atrapasso@vocecomm.com

REDWOOD SHORES, Calif., November 18, 2014 – Imperva Inc. (NYSE: IMPV), pioneering the third pillar of enterprise security with a new layer of protection designed specifically for physical and virtual data centers, today announced ThreatRadar Bot Protection Services, a new add-on for the SecureSphere Web Application Firewall (WAF). ThreatRadar Bot Protection Services distinguish between good bots, bad bots and human users, allowing customers to take action accordingly. Using the new service with the SecureSphere WAF, users can quickly identify and protect against malicious bots – a top threat for web applications.

Automated software robots, or “bots,” perform a variety of tasks on the Internet.  Based on a review of websites using the DDoS Mitigation service from Incapsula, an Imperva company, bots accounted for up to 61.5 percent^[1] of all website traffic in 2013. Some bots are good. For example, Google and other search engines use bots to index website pages. But according to Incapsula research, about half of the bots visiting a website are malicious, accounting for a significant portion of all website attacks, including participating in DDoS attacks, injecting comment spam, and scraping website content.  Additionally, between early 2013 and early 2014, there was a 240 percent increase in botnet attack activity for websites using Incapsula’s DDoS Mitigation service^[2].  DDoS bots are not only becoming more common, but they are getting smarter, able to bypass both JavaScript and Cookie challenges, previously the two most common methods of bot filtering.

“Accurately assessing and addressing bots is a key part of delivering the best experience possible for our users,” said Chris Sessions, Director of Operations at Trulia, a leading online marketplace for home buyers, sellers, renters and real estate professionals.  “As bots grow in sophistication, it’s more challenging to weed out the good from the bad without negatively impacting users. There’s definitely a need for automated solutions like ThreatRadar Bot Protection Services and SecureSphere WAF that can classify bots quickly and accurately, and then protect against unwanted traffic.”

ThreatRadar Bot Protection Services leverages a unique Client Classification Engine and a real time feed to profile clients accessing an organization’s web applications. It accurately distinguishes between human users and bots, and identifies whether bots are good or bad. The intelligence it collects during this process is then used by SecureSphere to take immediate action, for example blocking a bad bot before it can do damage. ThreatRadar Bot Protection Services enhances an organization’s online business and bottom line by protecting against the malicious bot traffic that would otherwise attack their applications and waste network and website infrastructure resources.

“ThreatRadar Bot Protection Services is built on technology that has been battle hardened on tens of thousands of sites for several years,” said Mark Kraynak, Chief Product Officer of Imperva. “This proven technology enables an organization to proactively defend itself against rapidly growing automated threats to web applications.”

Availability and Pricing
ThreatRadar Bot Protection Services is expected to be widely available by the end of this year. Other ThreatRadar services available from Imperva include ThreatRadar Reputation Services, Community Defense and ThreatRadar Fraud Prevention Services. 

Imperva also announced today SecureSphere version 11 with new capabilities to keep Big Data deployments safe.

Additional resources:

• ThreatRadar Bot Protection Services data sheet
• SecureSphere Agent for Big Data data sheet
• Blog: The ‘Bots are Attacking. Save Yourself.
• Learn more about today’s WAF market in Gartner’s 2014 Magic Quadrant for Web Application Firewalls (WAF)

About Imperva
Imperva, pioneering the third pillar of enterprise security, fills the gaps in endpoint and network security by directly protecting high-value applications and data assets in physical and virtual data centers. With an integrated security platform built specifically for modern threats, Imperva data center security provides the visibility and control needed to neutralize attack, theft, and fraud from inside and outside the organization, mitigate risk, and streamline compliance. Over 3,500 customers in more than 90 countries rely on our SecureSphere^® platform to safeguard their business. Imperva is headquartered in Redwood Shores, California. Learn more: www.imperva.com, our blog, on Twitter.

Forward Looking Statements
This press release contains forward-looking statements, including statements relating to Imperva’s beliefs regarding rapidly growing automated threats to web applications. These forward-looking statements are subject to material risks and uncertainties that may cause actual results to differ substantially from expectations. Investors should consider important risk factors, which include: the risk that our products are not adopted at levels that we anticipate; the risk that competitors may be perceived by customers to be better positioned to help handle security threats and compliance; and other risks detailed under the caption “Risk Factors” in the company’s Form 10-Q filed with the Securities and Exchange Commission, or the SEC, on November 7, 2014 and the company’s other SEC filings. You can obtain copies of the company’s SEC filings on the SEC’s website at www.sec.gov.

###

© 2014 Imperva, Inc. All rights reserved. Imperva, the Imperva logo and SecureSphere are trademarks of Imperva, Inc.