Imperva

What the company sells

Imperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users. Imperva Web Application Firewall (WAF) protects applications in any environment. Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks without impacting legitimate users.

Imperva API Security provides continuous protection of all APIs using deep discovery and classification of sensitive data. Imperva DDoS Protection automatically mitigates DDoS attacks, safeguarding applications and networks while minimizing downtime. Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart and streamlines regulatory compliance with PCI DSS 4.0. Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications while protecting against attacks.

Imperva WAF protects applications in any environment, cloud or on-premises, and offers automated policy creation. Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.

Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds. Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks, with a 3-second SLA. Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.

Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team. Client-Side Protection deployment uses the Imperva Cloud Application Security solution, with a fast detection process that starts within minutes. Imperva AI Application Security is engineered for the unique architecture of LLMs. AI Application Security operates as a SaaS reverse proxy positioned between applications and Large Language Models.

Imperva Data Security Fabric is purpose-built for hybrid multicloud environments. Imperva provides centralized data security across legacy and modern cloud environments. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva data security offers over 260 built-in integrations on an open platform to speed investigation and response. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.

BSE uses Imperva Application Security and Imperva Data Security to help fortify its applications, APIs and data. Imperva Web Application Firewall, Advanced Bot Protection and API Security work together to stop malicious automation and protect retail business logic. Imperva Data Risk Analytics helps retailers comply with GDPR and CCPA requirements by using machine learning to identify suspicious data access. Imperva Cloud Security supports PCI and GDPR compliance mandates.^{[2][4][9][11][12][13][14][15][16][17][18]}

Categories

• WAF and WAAP (primary category)
• API security
• Bot and abuse management
• DDoS protection
• Compare Imperva with companies in the same categoryside by side

Headquarters

Redwood Shores, United States^[3]

Founded

Not established from our sources

Ownership

Owned by Thales^{[1][5][7][8][10]}

CISO on record

Not yet on our record. Send a verified source

Website

imperva.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Web Application Firewall (WAF)^[9][12]

  Imperva WAF protects applications in any environment, cloud or on-premises.

  Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.

• Advanced Bot Protection^{[4][5][9][11][17]}

  Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks.

  Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds.

• API Security^{[4][5][9][17]}

  Imperva API Security provides continuous protection of all APIs.

• DDoS Protection^[5][9][12]

  Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks.

  Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.

• Client-Side Protection^[9][13]

  Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart.

  Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team.

• AI Application Security^[5][14]

  Imperva AI Application Security is engineered for the unique architecture of LLMs.

• Data Security Fabric^[15]

  Imperva Data Security Fabric is purpose-built for hybrid multicloud environments.

  Imperva Data Security Fabric protects all your data assets. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.

• Content Delivery Network^[9]

  Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Imperva's categories, then alphabetical. A list from the record, never a ranking.

• On waf and waap, Imperva competes with Fastly, Akamai, SafeLine, F5, Indusface, Blackwall, Cequence Security, Cloudflare, Traceable AI, Wallarm and 3 more.

• On api security, Imperva competes with Cequence Security, Traceable AI, Wallarm, 42Crunch, Data Theorem, Escape, Levo.ai, Pynt, Salt Security, Fastly and 15 more.

• On bot and abuse management, Imperva competes with Blackwall, DataDome, Arkose Labs, HUMAN Security, Fastly, Akamai, Cequence Security, SafeLine, Forter and Impart Security.

• On ddos protection, Imperva competes with A10 Networks, Cloudflare, NETSCOUT, Fastly, Akamai, Blackwall, DataDome, SafeLine, Brava, Network Critical and 2 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 5.0 out of 5^[7]seen November 6, 2026
• Gartner Peer Insights · 4.6 out of 5^[8]seen November 6, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• August 24, 2026

  Thales Imperva introduced the SSL Integration Center, a framework connecting Imperva Cloud WAF with certificate lifecycle management platforms, launching with a DigiCert integration. Imperva^[19]

• August 3, 2026

  Thales launched Imperva for AWS, which provides web application, API and bot protection for AWS environments. Business Wire^[6]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Thales completes acquisition imperva creating global leaderThales Group · thalesgroup.com · published December 4, 2023 · Tier A: the company, a regulator or a filing
2. [2]AboutImperva · imperva.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Greg clark joins imperva board of directorsImperva · imperva.com · published June 4, 2014 · Tier A: the company, a regulator or a filing
4. [4]Application securityImperva · imperva.com · published August 23, 2026 · Tier A: the company, a regulator or a filing
5. [5]Cyber Security Leader | Imperva, Inc.Imperva · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
6. [6]Thales Launches Imperva for AWS to Help Organizations Protect Applications and APIsBusiness Wire · published August 3, 2026 · Tier A: the company, a regulator or a filing
7. [7]Imperva Data Security Fabric Reviews & Product Details - G2G2 · undated page, accessed October 25, 2026 · Tier C
8. [8]Thales Group (Imperva) Reviews - Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 25, 2026 · Tier C
9. [9]Best Application Security | Imperva WAAP ProtectionImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
10. [10]Web Application Firewall (WAF) | Cloud & On-Prem | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
11. [11]Advanced Bot Protection | Stop Advanced Bots | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
12. [12]Advanced DDoS Protection & Mitigation Services | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
13. [13]Client-Side Protection | PCI 4.0 Compliance | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
14. [14]Enterprise AI & LLM Security | Stop Prompt Injection | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
15. [15]Data Security Solutions | Protecting Data Everywhere | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
16. [16]Plans and Services | Imperva Cyber SecurityImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
17. [17]Retail & eCommerce Cyber Security | Secure Online Transactions | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
18. [18]Data Security Fabric | Protect All Data Types | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
19. [19]Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle ManagerImperva · published August 24, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 6, 2026 from the references above.

Work for Imperva? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.