WP RASP Security | Runtime Application Self-Protection | Imperva

Home > Application Security > Runtime Protection 

Runtime Protection

Achieve runtime application self-protection with in-app context and real-time security insights. Without context, how do you know if it's malicious? Develop your applications with the knowledge that you are secure by default.

Runtime Protection goes everywhere and works anywhere

Imperva Runtime Protection secures applications during execution by detecting and blocking threats in real time. It identifies vulnerabilities and abnormal behaviors, defending against OWASP attacks to ensure secure, uninterrupted app performance.

Secure by default

Built-in security measures from the start ensure best practices are enabled by default, minimizing vulnerabilities and reducing the need for user configuration. This approach provides strong, out-of-the-box protection, reducing misconfigurations and enhancing resilience against attacks.

Detect anomalies and threats

Imperva’s RASP tools provide in-app visibility and real-time insights into application behavior, enabling rapid threat detection and response. Understanding runtime activities enables teams to respond faster and with precision.

Protect against supply chain attacks

Supply chain attacks involve securing third-party software, ensuring strong access controls, and continuously monitoring for vulnerabilities. This reduces exposure to compromised vendors, preventing unauthorized access to critical systems and data.

How Imperva Runtime Protection works

Customizable interface

Imperva’s RASP tools integrate with all major SIEMs, allowing seamless log tracking without interrupting your workflow. Giving customization for each organization’s environment to best meet their needs.

Granular visibility

Runtime Protection gives in-application context and visibility at a level most application security solutions do not. Seeing down to the line of code what was affected by an attack and how it was protected by default.

Flexible deployment options

Deploy Runtime Protection in one of three modes to meet your Secure Software Development Lifecycle (SSDLC) needs. Disable when bad code is found, monitor to get the visibility into the application your security team needs, and protect when in production.

In-app attack context

The Runtime Management Console gives log visualization to give more context behind events. Know the what, when, where, and how for every event in your application.

Runtime Protection (RASP)

Imperva RASP uses Language Theoretic Security (LANGSEC) to detect and neutralize known and zero-day attacks, ensuring applications are secure by default. With Imperva RASP, businesses can identify vulnerabilities, patch them on their schedule, and maintain optimal performance. Secure your applications now with Imperva RASP.

Supported platforms

Java
Net.core
Node
microsoft.net
Python
SQL server
MySql
Frame 16160
Oracle
IBM 1
Splunk
Arcsight
elastic
IBM
Attack Analytics

Protect applications in runtime

Monitor and secure applications during execution to protect critical business operations in real-time. Prevent disruptions and data breaches from threats like code injection and memory exploits by enforcing dynamic security policies, ensuring continuous and secure service delivery.

Zero-day protection

Using patented grammar-based techniques, RASP allows applications to defend themselves without signatures or patches—providing security by default and sparing you the operational costs of off-cycle zero-day patching.

Cloud-native protection

With fading controls and ephemeral workloads, cloud-native applications need more than just perimeter security. RASP provides security from within and goes wherever your application goes.

Insider threat protection

With optimal visibility through the runtime, RASP sees east/west traffic within the application even from careless and malicious insiders.

Runtime Protection FAQs

  • Who is Runtime Protection for?

    Imperva Runtime Protection is for any enterprise looking to implement Secure Software Supply Chain Development (SSLDC), or to protect through the development lifecycle.

  • Why do I need runtime protection?

    Protection at runtime is the future of application security. It offers OWASP Top 10 protection of every application, no matter where it is/goes, truly anywhere, from the beginning of development to production and beyond. While giving a level of visibility and context for every action in the application, you can only get at runtime.

  • I already have a WAF. Why do I need protection at the runtime?

    Runtime protection gives a level of protection WAF cannot. Security at default for every application, zero-day protection, developer-first security, microsegregation protections, and in-app context/visibility. However, runtime protection does not block volumetric (attacks like DDoS) so having both a WAF and protection at runtime will give impenetrable layers of application security.

  • What is Runtime Protection?

    Runtime protection refers to securing applications during their execution in a live environment. Unlike traditional security measures that focus on protecting applications after deployment (e.g., firewalls, intrusion detection systems), runtime protection is concerned explicitly with detecting and mitigating threats that arise while the application is actively running. The two major deployment models are agent based or eBPF based.