What the platform gives you
Requirements we hold any application firewall to, on premises or as a subscription.
Known attack classes
The common web attack classes, including everything in the widely used top ten lists, blocked with rules maintained against current exploitation techniques.
Behavioural profiling
The application and its users are profiled, so anomalous requests can be blocked before a signature exists for them.
API protection
Requests against APIs are validated against expected structure and behaviour, not just filtered as generic web traffic.
Bot management
Automated traffic is separated from human traffic, including clients that execute scripts to look like a browser.
Application layer denial of service
Traffic patterns aimed at exhausting the application rather than the link are identified and throttled.
Client side protection
A client module defends users against script injection and request forgery attacks that execute in their browser.
Virtual patching
A known vulnerability can be shielded with a targeted rule, which buys the development team time to fix the code properly.
File upload inspection
Uploaded and downloaded files are scanned with multiple engines before they reach users or storage.
Correlation and custom rules
Related events across sessions are linked, and your own logic can be expressed as rules for the behaviour specific to your application.
Three ways to put it in front of an application
The right mode depends on whether you need to see attacks or stop them, and how much you are willing to change the traffic path.
A vulnerability has a lifespan, and it is longer than you think
A flaw exists from the moment the code ships. It is discovered later, disclosed later still, and patched when the release calendar allows. The firewall covers the gap between disclosure and deployment, which is the window attackers actually use.
You own it, we build it
Deployed on your premises under your licences, tuned against your traffic, with your team holding the policy.
We run it as a subscription
Hosted protection with monthly commercial terms, configured and operated by us, with no hardware to buy.
Controls that work alongside it
Source code review
Fix the vulnerability in code while the firewall holds the line.
Application assessment
Test the application the way an attacker would, before someone else does.
SIEM
Firewall events correlated with the rest of the estate rather than read in isolation.