F5, Fastly, Imperva and Indusface

About Fastly

Fastly is an edge cloud platform that helps companies deliver fast, secure, and reliable digital experiences. Fastly combines CDN, security (including WAF and DDoS protection), and edge computing so teams can control how content and applications are delivered and protected in real-time. Fastly describes one programmable platform to scale AI systems, protect content from bots, and run the edge with natural language. Fastly describes Secure as protecting apps and APIs from AI-scale threats. Fastly says it powers millions of mission-critical applications in thousands of the world's most digitally-advanced companies.^[3][5][6]

Fastly says its application security solutions are designed for security and resilience at global scale and help teams mitigate evolving threats and control bots. Fastly offers CDN for content delivery, WAF for application protection, DDoS mitigation, bot management, and edge compute solutions for running logic closer to users. Fastly says its products work together as a unified platform. Fastly refers to its global network as having 622 Tbps of capacity.^[5][6]

Fastly Next-Gen WAF is a web application firewall that monitors for suspicious and anomalous web traffic and protects, in real-time, against attacks directed at the applications and origin servers that customers specify. Fastly Next-Gen WAF now collectively refers to the products previously known as the Signal Sciences Cloud WAF and Signal Sciences Next-Gen WAF. Fastly Next-Gen WAF continues to be powered by Signal Sciences technology. Next-Gen WAF identifies and tracks attacks across all of a customer's deployments and determines whether to flag the originating IP address as potentially problematic, rate limit the IP address or allow the request. Next-Gen WAF can be deployed in three different ways. The On-Prem WAF deployment consists of two components, the module and the agent. Cloud WAF deployment requires uploading a TLS certificate, adding an origin server using the Next-Gen WAF control panel, and updating DNS records. Next-Gen WAF customers receive threat intelligence through the Network Learning Exchange (NLX) feature, which adds a unique signal to information in the control panels.^[9]

Fastly DDoS Protection provides real-time visibility into and defense against common Distributed Denial of Service (DDoS) attacks. Fastly Client-Side Protection provides the ability to inventory and control resources such as scripts, images, and fonts.^[10]

Fastly describes Managed Security as 24/7 expert-managed WAF, bot, and DDoS threat protection. Managed Security Professional provides continuous monitoring of included Fastly security products and proactive action by Fastly in the event of an identified security incident. Managed Security Professional includes enhanced access to Fastly's Customer Security Operations Center (CSOC) and periodic consultation with a Designated Security Specialist. Managed Security Professional includes a quarterly report documenting events observed and actions taken, recommendations for configuration changes and maintenance, and product updates.^[5][11]

ARC is a unified control plane that sits between applications and AI models, giving centralized visibility, governance, and control over all AI traffic. ARC replaces raw provider API keys with rotatable virtual keys and supports connecting to providers via federated SSO pass-through. ARC lets customers set a monthly dollar budget per virtual key, with a choice of hard-block or continue-serving once exhausted. AI Firewall is a security module within ARC that protects AI-powered applications from prompt injection attacks with near-zero latency impact. AI Firewall uses Fastly's SmartParse detection engine and custom guardrails to detect attacks like prompt injection and other LLM specific attacks.^[12]

Fastly's cloud CDN accelerates the delivery of dynamic content and caches website content that is unpredictable and event-driven. Fastly's Compute platform helps customers compile custom code to WebAssembly and runs it at the Fastly edge. Deploying to a Compute service makes customer logic available across the Fastly network with a single deploy action. Fastly Object Storage is an Amazon S3-compatible large object storage solution. Fastly's Platform TLS product allows customers to programmatically manage certificates and keys for Transport Layer Security (TLS) using a web API. Origin Inspector provides a dataset and visualizations that offer real-time and historical visibility into responses delivered from origin servers to the Fastly Edge Cloud. Fastly says customers can configure the Fastly CDN service to cache and transmit protected health information (PHI) in keeping with Health Information Portability and Accountability Act (HIPAA) security requirements. Fastly describes Managed CDN as Fastly's managed cloud CDN deployed inside the customer's own network, and Professional Services as expert help to migrate or optimize a delivery service. Fastly describes itself as an ICANN-accredited domain registrar.^{[2][5][6][10][11][13][14][15][16][17]}

About Imperva

Imperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users. Imperva Web Application Firewall (WAF) protects applications in any environment. Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks without impacting legitimate users.^[4][9]

Imperva API Security provides continuous protection of all APIs using deep discovery and classification of sensitive data. Imperva DDoS Protection automatically mitigates DDoS attacks, safeguarding applications and networks while minimizing downtime. Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart and streamlines regulatory compliance with PCI DSS 4.0. Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications while protecting against attacks.^[9][13]

Imperva WAF protects applications in any environment, cloud or on-premises, and offers automated policy creation. Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.

Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds. Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks, with a 3-second SLA. Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.^[11][12]

Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team. Client-Side Protection deployment uses the Imperva Cloud Application Security solution, with a fast detection process that starts within minutes. Imperva AI Application Security is engineered for the unique architecture of LLMs. AI Application Security operates as a SaaS reverse proxy positioned between applications and Large Language Models.^[13][14]

Imperva Data Security Fabric is purpose-built for hybrid multicloud environments. Imperva provides centralized data security across legacy and modern cloud environments. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva data security offers over 260 built-in integrations on an open platform to speed investigation and response. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.^[15][16][18]

BSE uses Imperva Application Security and Imperva Data Security to help fortify its applications, APIs and data. Imperva Web Application Firewall, Advanced Bot Protection and API Security work together to stop malicious automation and protect retail business logic. Imperva Data Risk Analytics helps retailers comply with GDPR and CCPA requirements by using machine learning to identify suspicious data access. Imperva Cloud Security supports PCI and GDPR compliance mandates.^[2][14][17]

About Indusface

Indusface sells the AppTrana platform for web apps, APIs and AI workloads, and the Indusface WAS platform for DAST scanning and pen-testing. AppTrana connects scanning, WAAP and remediation into one autonomous loop that discovers exposure, tests risk, protects at the edge and proves what is fixed.^[1][2][3]

AppTrana continuously maps an attack surface of web apps, APIs, AI endpoints and shadow assets. AppTrana deployment requires a DNS change and whitelisting of AppTrana NAT IPs. AppTrana is a cloud WAF hosted in AWS. AppTrana supports public cloud, private cloud, on-premise and custom port application deployments. AppTrana protects standard web apps, raw TCP and custom ports whether applications sit on-prem, in cloud or behind any origin. AppTrana delivers traffic through dual tier-1 CDN partners with automatic failover, managed edge caching and TLS optimization. AppTrana forces application traffic through the WAF path and blocks direct-to-origin access.^[3][5][6]

AppTrana maps scanner findings to WAF coverage so teams know which vulnerabilities are already protected at the edge. AppTrana absorbs L3-L7 floods across a 100 Tbps+ distributed global network, backed by 24x7 managed service. AppTrana behavioral DDoS protection adapts to live baselines across users, API clients and AI endpoints. AppTrana combines granular limits across URI, endpoint, IP, session, host, geography and AI workloads with layered mitigation. AppTrana scores every request, session and client for risk and lets a team set the action for each tier, from allow to challenge to block. AppTrana maintains controls for legitimate bots including search crawlers, uptime monitors, SEO tools, partner API clients, internal services and LLM crawlers. AppTrana bills only on clean traffic reaching the origin.^{[2][3][6][7][8][10]}

AppTrana continuously inventories all first-party and third-party JavaScript across a site and runs AI-driven risk analysis on each script. AppTrana monitors scripts inside the user's browser, allows trusted JavaScript to execute and blocks malicious outbound requests before data leaves the browser. AppTrana provides automated JS inventory, integrity checks and unauthorized change alerting on payment pages for requirements 6.4.3 and 11.6.1. AppTrana's 24x7 managed security team disables malicious scripts near real-time without a code change.^{[5][6][9][10]}

AppTrana discovers documented, shadow, zombie and rogue APIs, then classifies authentication state and PII, PCI and PHI exposure in the same inventory. AppTrana learns methods, paths, parameters and data types from traffic so only legitimate API calls get through. AppTrana API Security finds every API, validates risk and enforces runtime protection with autonomous tuning. AI Shield discovers AI and LLM-backed endpoints, then protects them from prompt injection, abuse and data exposure. DAST tests for prompt injection, insecure output handling, model DoS and other LLM-specific vulnerabilities. Token-based rate limits prevent denial-of-wallet abuse where attackers run up an inference bill.^[10][11]

SwyftComply gives every finding an AI-generated virtual patch that is expert-validated before enforcement, and delivers an audit-ready report in under 72 hours. Multi-model AI agents scan applications for business-logic vulnerabilities, reasoning about specific workflows, not just signature matching. Indusface security experts review every finding, classify severity and map each finding to a compliance framework before policy work begins. AI agents autonomously apply SwyftComply Policy Engine templates to an application, and experts create bespoke policies for business logic not covered yet. Virtual patches are tested against real traffic, and policies are promoted to block mode after expert validation.^{[1][2][3][5][12][13]}

Indusface WAS crawls web applications, identifies attack surfaces and simulates malicious requests to detect vulnerabilities such as SQLi, XSS and broken authentication. Indusface WAS includes a DAST scanner for application and infrastructure vulnerabilities and a malware scanner that checks for defacements. Indusface WAS supports graybox scans that use various credentials including user and admin. In all paid plans, Indusface WAS gives access to unlimited scans. Complementary pen-testing and one revalidation are provided as part of Indusface WAS Premium plans. Expert-led penetration testing covers REST, SOAP, GraphQL, WebSocket and AI/LLM API endpoints. Mobile app penetration testing includes more than 150 assessments across iOS, Android and hybrid platforms.^[1][4][13]

AI monitors attacks and tests policy changes 24x7, and a named security expert validates, tunes and patches within SLA when exceptions need a human call. The same managed services team onboards and tunes each AppTrana capability, from WAF and API security to bot and DDoS protection and AI Shield. A proprietary AI model tests policy changes against an app during onboarding and after each rule update, and Indusface experts review the exceptions. Every AppTrana plan includes advanced bot defense, full API security and unlimited managed services, and enterprise buyers get a named TAM with quarterly business reviews.^{[1][2][3][4][5][6][8][10][11][13]}