CISO Tribune

Vendor comparison · 2 companies

Appdome vs Imperva

Appdome is an agentic platform that builds and maintains security, anti-fraud and other defenses in Android and iOS apps. Imperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users. CISO Tribune files both under API security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Appdome
  • Imperva
Appdome vs Imperva: Products, Customers and Funding Compared
AppdomeAppdome is an agentic platform that builds and maintains security, anti-fraud and other defenses in Android and iOS apps.appdome.comImpervaImperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users.imperva.com
What it sells
  • iOS Jailbreak Detection[7]Writes and maintains jailbreak detection in iOS apps.
  • Threat-Events[5]In-app intelligence and control framework that detects threats and passes threat data to the app.
  • ThreatScope[3][7]Threat analysis service and embedded Agentic SOC Agent.
  • Certified Secure[5]DevSecOps certification for mobile app releases.
  • Web Application Firewall (WAF)[9][12]Imperva WAF protects applications in any environment, cloud or on-premises.
  • Advanced Bot Protection[4][5][9][11][17]Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks.
  • API Security[4][5][9][17]Imperva API Security provides continuous protection of all APIs.
  • DDoS Protection[5][9][12]Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks.
  • Client-Side Protection[9][13]Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart.
  • AI Application Security[5][14]Imperva AI Application Security is engineered for the unique architecture of LLMs.
  • Data Security Fabric[15]Imperva Data Security Fabric is purpose-built for hybrid multicloud environments.
  • Content Delivery Network[9]Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications.
Categories
Headquarters
Redwood City, United States[1]Redwood Shores, United States[3]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesOwned by Thales[1][5][7][8][10]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 2, 2026Appdome introduced Live Update, a capability for changing security, anti-fraud and bot-defense policies in live published mobile apps without rebuilding or republishing the app.[9]
  • August 2, 2026Appdome introduced Appdome Test, a capability that validates protected mobile apps on the devices and operating system versions a brand's own customers use.[8]
  • March 17, 2026Appdome unveiled DefenseOS, a governed execution environment for security, anti-fraud and API protection controls in mobile applications.[10]
  • August 24, 2026Thales Imperva introduced the SSL Integration Center, a framework connecting Imperva Cloud WAF with certificate lifecycle management platforms, launching with a DigiCert integration.[19]
  • August 3, 2026Thales launched Imperva for AWS, which provides web application, API and bot protection for AWS environments.[6]
G2 and Gartner Peer Insights
  • G2: listed, seen November 5, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 6, 2026[7]
  • Gartner Peer Insights: listed, seen November 6, 2026[8]
Who it fits
From its own pages, Appdome sells mainly to mobile developers, DevSecOps teams, and cyber and fraud teams that need defenses in Android and iOS apps. Appdome names mobile banking, retail and shopping, payment, travel and transportation, gig and work, game and healthcare apps as the kinds of apps it serves. Appdome addresses B2B mobile app developers who face demands from enterprise customers to support UEM, MDM and MAM. Appdome says its management integrations cover managed, unmanaged, corporate-owned and BYOD environments.From its own pages, Imperva sells mainly to organizations that need to protect applications and APIs in public or private cloud, hybrid and on-premises environments. Imperva addresses retail organizations that need to protect customers' data and secure applications, APIs, and cloud networks. Imperva addresses businesses aiming to comply with PCI DSS 4.0 standards while defending against client-side attacks. Imperva describes support for compliance in highly regulated industries across hybrid and multicloud environments. Imperva describes a purpose-built solution to secure AI applications for homegrown GenAI.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Appdome and Imperva are both filed under API security.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Appdome's primary category is Application shielding and RASP; Imperva's is WAF and WAAP.
  • Appdome is also filed under Mobile security. Imperva is also filed under Bot and abuse management and DDoS protection.
  • Appdome lists iOS Jailbreak Detection, Threat-Events, ThreatScope and Certified Secure. Imperva lists Web Application Firewall (WAF), Advanced Bot Protection, API Security, DDoS Protection, Client-Side Protection and 3 more.
  • Appdome is headquartered in Redwood City, United States. Imperva is headquartered in Redwood Shores, United States.
  • Imperva is owned by Thales.

What it sells: Appdome

What iOS Jailbreak Detection does[7]
Appdome runs in the CI/CD pipeline to code, build and maintain jailbreak detection in iOS apps. Appdome adds in-app iOS jailbreak detection with no code, no SDK and no external servers required. Appdome says it works against 100s of popular iOS jailbreak tools such as CheckRa1n, Unc0ver and Chimera.
What Threat-Events does[5]
Appdome's Threat-Event in-app intelligence and control framework detects threats. It passes enriched Threat-Event data, including attack detail, type, source and device, back to the mobile app for processing and threat response.
What Certified Secure does[5]
Certified Secure is a DevSecOps certification that Appdome says guarantees every mobile app release is certified-protected. Appdome says it provides a continuous record of compliance with cyber and anti-fraud mandates.

What it sells: Imperva

What Web Application Firewall (WAF) does[9][12]
Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.
What Advanced Bot Protection does[4][5][9][11][17]
Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds.
What DDoS Protection does[5][9][12]
Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.
What Client-Side Protection does[9][13]
Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team.
What Data Security Fabric does[15]
Imperva Data Security Fabric protects all your data assets. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.

Questions about Appdome and Imperva

What do Appdome and Imperva sell?
Appdome sells iOS Jailbreak Detection, Threat-Events, ThreatScope and Certified Secure. Imperva sells Web Application Firewall (WAF), Advanced Bot Protection, API Security, DDoS Protection, Client-Side Protection and 3 more.
Are Appdome and Imperva in the same category?
They share API security. Appdome's primary category is Application shielding and RASP and Imperva's is WAF and WAAP.
Where are Appdome and Imperva headquartered?
Appdome is headquartered in Redwood City, United States. Imperva is headquartered in Redwood Shores, United States.
Who owns Appdome and Imperva?
Imperva is owned by Thales.
Who are Appdome and Imperva sold to?
From its own pages, Appdome sells mainly to mobile developers, DevSecOps teams, and cyber and fraud teams that need defenses in Android and iOS apps. From its own pages, Imperva sells mainly to organizations that need to protect applications and APIs in public or private cloud, hybrid and on-premises environments.
What have Appdome and Imperva announced recently?
August 2, 2026: Appdome introduced Live Update, a capability for changing security, anti-fraud and bot-defense policies in live published mobile apps without rebuilding or republishing the app. August 24, 2026: Thales Imperva introduced the SSL Integration Center, a framework connecting Imperva Cloud WAF with certificate lifecycle management platforms, launching with a DigiCert integration.

About Appdome

Appdome is an agentic platform that builds and maintains security, anti-fraud and other defenses in Android and iOS apps. Appdome builds and maintains 400+ mobile app security, anti-fraud, anti-bot, and API and Identity protection features in mobile apps. Appdome says there are no epics, no coding and no SDKs when mobile teams use the platform. Appdome says the work of protecting the mobile business from fraud, scams, API abuse and cyber attacks is automated inside an enterprise workflow.[2][3]

Appdome describes a patented no-code mobile security and development platform that allows developers and DevSecOps to build secure Android and iOS apps in seconds. Appdome runs in the CI/CD pipeline to code, build and maintain jailbreak detection in iOS apps. Appdome's Build Agent adjusts the security features to match any application change or update. Appdome says cyber and fraud teams across industries need their own agentic platform that plugs into the engineering pipeline and addresses cyber, anti-fraud, API protection and identity objectives without imposing more work on the engineering team.[3][6][7]

Appdome says customers get detailed threat data from every Android and iOS threat, attack, detection and defense. Appdome says that data can be used in the app, at the network edge, on the backend and through ThreatScope. Appdome provides ThreatScope, a threat analysis service and embedded Agentic SOC Agent that monitors the active attack surface of a mobile business. Appdome offers enforcement options such as in-app defense, in-app detection, in-app defense with Intel, threat and risk profiling, and API and OTA enforcement. Appdome says its Agent Workforce can interrogate threat data, support end users facing threats, choose new defenses and prove compliance.[3][7]

Appdome Threat-Events is meant to let developers and brands stay in full control of the mobile end user experience when attacks happen. Appdome's Threat-Event in-app intelligence and control framework detects threats and passes enriched Threat-Event data, including attack detail, type, source and device, back to the mobile app for processing and threat response.

For iOS jailbreak detection, Appdome lets customers choose from 400+ defenses that detect iOS jailbreak, block jailbreak hiders, and detect Sileo and Cydia. Appdome adds in-app iOS jailbreak detection to iOS apps in the DevOps CI/CD pipeline with no code, no SDK and no external servers required. Appdome says its iOS jailbreak detection works against 100s of popular iOS jailbreak tools such as CheckRa1n, Unc0ver and Chimera. Appdome says its iOS jailbreak detection complements other Appdome protections such as anti-tampering, encryption and obfuscation.[7]

For enterprise mobility, Appdome automatically builds and maintains UEM, MAM, and MDM integrations in Android and iOS apps. Appdome integrates Microsoft Intune, BlackBerry UEM, Omnissa Workspace ONE, Ivanti and other enterprise mobility frameworks. Appdome supports app and device management across managed, unmanaged, corporate-owned and BYOD environments. Appdome applies access control, authentication and device compliance policies directly in mobile apps. Appdome delivers continuous detection and protection against malware, phishing, account takeover, device compromise and other advanced mobile threats.

Certified Secure is a DevSecOps certification that Appdome says guarantees every mobile app release is certified-protected. Appdome says Certified Secure provides a continuous record of compliance with cyber and anti-fraud mandates.

Appdome delivers continuous security and compliance for mobile banking apps. Appdome delivers continuous security and compliance for mobile retail and shopping apps. Appdome delivers continuous security and compliance for mobile payment apps. Appdome delivers continuous security and compliance for mobile travel or transportation apps. Appdome delivers continuous security and compliance for mobile work or gig apps and for mobile games. For healthcare apps, Appdome points to regulations and standards such as HIPAA, GDPR and FDA regulations for medical device apps.[3]

Appdome on the record

Sources

Appdome full record

  1. [1]Identity first mobile api protectionAppdome · appdome.com · published April 14, 2026 · Tier A
  2. [2]appdome.comAppdome · appdome.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Appdome - Agentic Defense for the Mobile BusinessAppdome · undated page, accessed October 23, 2026 · Tier A
  4. [4]Appdome Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  5. [5]Mobile App Management for Mobile Apps & APIs | AppdomeAppdome · undated page, accessed November 5, 2026 · Tier A
  6. [6]About Appdome - Meet the team that is fanatical about mobile app securityAppdome · undated page, accessed November 5, 2026 · Tier A
  7. [7]iOS Jailbreak Detection for Mobile Apps & APIs | AppdomeAppdome · undated page, accessed November 5, 2026 · Tier A
  8. [8]Appdome Launches Test Automation, Using the Devices in a Mobile Brand's Production EnvironmentAppdome · published August 2, 2026 · Tier A
  9. [9]Appdome Introduces Live Security Updates, Adding Real-Time Protection to Build-Time Protection on the Same PlatformAppdome · published August 2, 2026 · Tier A
  10. [10]Appdome Unveils DefenseOS™, its Governed Execution Engine for Scaled Protection in Mobile AppsAppdome · published March 17, 2026 · Tier A

Imperva full record

  1. [1]Thales completes acquisition imperva creating global leaderThales Group · thalesgroup.com · published December 4, 2023 · Tier A
  2. [2]AboutImperva · imperva.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Greg clark joins imperva board of directorsImperva · imperva.com · published June 4, 2014 · Tier A
  4. [4]Application securityImperva · imperva.com · published August 23, 2026 · Tier A
  5. [5]Cyber Security Leader | Imperva, Inc.Imperva · undated page, accessed October 25, 2026 · Tier A
  6. [6]Thales Launches Imperva for AWS to Help Organizations Protect Applications and APIsBusiness Wire · published August 3, 2026 · Tier A
  7. [7]Imperva Data Security Fabric Reviews & Product Details - G2G2 · undated page, accessed October 25, 2026 · Tier C
  8. [8]Thales Group (Imperva) Reviews - Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 25, 2026 · Tier C
  9. [9]Best Application Security | Imperva WAAP ProtectionImperva · undated page, accessed November 6, 2026 · Tier A
  10. [10]Web Application Firewall (WAF) | Cloud & On-Prem | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  11. [11]Advanced Bot Protection | Stop Advanced Bots | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  12. [12]Advanced DDoS Protection & Mitigation Services | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  13. [13]Client-Side Protection | PCI 4.0 Compliance | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  14. [14]Enterprise AI & LLM Security | Stop Prompt Injection | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  15. [15]Data Security Solutions | Protecting Data Everywhere | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  16. [16]Plans and Services | Imperva Cyber SecurityImperva · undated page, accessed November 6, 2026 · Tier A
  17. [17]Retail & eCommerce Cyber Security | Secure Online Transactions | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  18. [18]Data Security Fabric | Protect All Data Types | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  19. [19]Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle ManagerImperva · published August 24, 2026 · Tier A

Spot a factual error? Request a correction.