Imperva Cloud Application Security

What do you like best?

The most helpful part of Imperva Cloud Security is preventing bad actors from accessing your site and attempting to break into it or deface it. There are many upsides that come along with this, including the ability to prevent bad actors from profiling your site to find weaknesses to exploit them, often times these bots run through hundreds if not thousands of vulnerabilities at a time in the manner of seconds, with Imperva they get stopped in their tracks. If bandwidth is a concern this will help preserve it for legitimate traffic.

What do you dislike?

If you have multiple varying domains under your account, and are using Imperva's SSL Certificates, they all share the same and tools on the net can be used to find alternate sites under your account. This was not a major concern for my company, but can see some examples of how this could be revealing.

Recommendations to others considering the product:

If you have no WAF in place currently and your site is not brand new, try Imperva's demo, and you will quickly see why you should be using the product. Watch the amount of traffic that it blocks, and then compare the metrics from the resources before and after to see the difference.

What problems are you solving with the product? What benefits have you realized?

Imperva is a firewall for your websites, it solves the problem of stopping nefarious acts from being carried out. We have seen an significant decrease in resource and bandwidth usage due to blocking threats from accessing our sites. Without having Imperva this traffic would be allowed to pass through to our site eating up compute and bandwidth. This can also be a cost saving factor for hosting scenarios based on this alone, but really is an added bonus when locking down your critical infrastructure, whether is publicly or locally hosted. If it requires access from the Internet you should be protecting yourself with Imperva.