CISO Tribune

Vendor comparison · 2 companies

Imperva vs Network Critical

Imperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users. Network Critical sells modular TAP and Packet Broker solutions for network visibility. CISO Tribune files both under DDoS protection. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Imperva
  • Network Critical
Imperva vs Network Critical: Products, Customers and Funding Compared
ImpervaImperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users.imperva.comNetwork CriticalNetwork Critical sells modular TAP and Packet Broker solutions for network visibility.networkcritical.com
What it sells
  • Web Application Firewall (WAF)[9][12]Imperva WAF protects applications in any environment, cloud or on-premises.
  • Advanced Bot Protection[4][5][9][11][17]Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks.
  • API Security[4][5][9][17]Imperva API Security provides continuous protection of all APIs.
  • DDoS Protection[5][9][12]Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks.
  • Client-Side Protection[9][13]Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart.
  • AI Application Security[5][14]Imperva AI Application Security is engineered for the unique architecture of LLMs.
  • Data Security Fabric[15]Imperva Data Security Fabric is purpose-built for hybrid multicloud environments.
  • Content Delivery Network[9]Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications.
  • Network TAPs[1][3]A network TAP creates an exact copy of all data flowing between two points in a network.
  • Packet Brokers[1][7][8][13]Network packet brokers process inputs from multiple sources and deliver the right traffic to the right tools.
  • Hybrid TAP and Packet Broker[8]A hybrid test access point and packet broker combines the functions of a TAP and a packet broker in one package.
  • Bypass TAPs[9][10]A bypass TAP monitors security devices and reroutes network traffic around failing tools.
  • INVIKTUS[1][11][12]INVIKTUS is a zero-trust security solution.
  • Ethernet TAPs[6]Ethernet TAPs capture network traffic without impacting performance.
  • Passive Fiber TAPs[5]Passive fiber TAPs provide always-on monitoring, including when the power is out.
Categories
Headquarters
Redwood Shores, United States[3]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Thales[1][5][7][8][10]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 24, 2026Thales Imperva introduced the SSL Integration Center, a framework connecting Imperva Cloud WAF with certificate lifecycle management platforms, launching with a DigiCert integration.[19]
  • August 3, 2026Thales launched Imperva for AWS, which provides web application, API and bot protection for AWS environments.[6]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 6, 2026[7]
  • Gartner Peer Insights: listed, seen November 6, 2026[8]
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Imperva sells mainly to organizations that need to protect applications and APIs in public or private cloud, hybrid and on-premises environments. Imperva addresses retail organizations that need to protect customers' data and secure applications, APIs, and cloud networks. Imperva addresses businesses aiming to comply with PCI DSS 4.0 standards while defending against client-side attacks. Imperva describes support for compliance in highly regulated industries across hybrid and multicloud environments. Imperva describes a purpose-built solution to secure AI applications for homegrown GenAI.Network Critical provides bypass TAPs for data centres running inline IPS, firewalls and DDoS mitigation tools. Network Critical describes its data diodes as suitable for highly regulated sectors, such as military, ICS and SCADA infrastructure. Network Critical describes its environmentally protected OT devices as suited to manufacturing floors, utility substations and outdoor installations.
Last verified
September 27, 2026November 8, 2026

Where they overlap

  • Imperva and Network Critical are both filed under DDoS protection.

Where they differ, field by field

  • Imperva's primary category is WAF and WAAP; Network Critical's is Network visibility and traffic brokering.
  • Imperva is also filed under API security and Bot and abuse management. Network Critical is also filed under OT and ICS security.
  • Imperva lists Web Application Firewall (WAF), Advanced Bot Protection, API Security, DDoS Protection, Client-Side Protection and 3 more. Network Critical lists Network TAPs, Packet Brokers, Hybrid TAP and Packet Broker, Bypass TAPs, INVIKTUS and 2 more.
  • Imperva is headquartered in Redwood Shores, United States.
  • Imperva is owned by Thales.

What it sells: Imperva

What Web Application Firewall (WAF) does[9][12]
Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.
What Advanced Bot Protection does[4][5][9][11][17]
Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds.
What DDoS Protection does[5][9][12]
Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.
What Client-Side Protection does[9][13]
Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team.
What Data Security Fabric does[15]
Imperva Data Security Fabric protects all your data assets. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.

What it sells: Network Critical

What Network TAPs does[1][3]
A network TAP creates an exact copy of all data flowing between two points in a network. TAPs are used to monitor network traffic for performance, security, or compliance.
What Packet Brokers does[1][7][8][13]
Network packet brokers process inputs from multiple sources and deliver the right traffic to the right tools. SmartNA-PortPlus is a packet broker that aggregates low-speed links onto fewer high-speed tools.
What Hybrid TAP and Packet Broker does[8]
A hybrid test access point and packet broker combines the functions of a TAP and a packet broker in one package. Hybrid TAP and packet brokers offer traffic aggregation, load balancing and port mapping. They use interchangeable, hot-swappable TAP modules, including fail-safe copper.
What Bypass TAPs does[9][10]
A bypass TAP monitors security devices and reroutes network traffic around failing tools. Bypass TAPs send small test signals, known as heartbeats, to security appliances. SmartNA-XL bypass TAPs detect when inline security tools fail and redirect traffic in real-time.
What INVIKTUS does[1][11][12]
INVIKTUS is a zero-trust security solution. INVIKTUS network security is built on the zero-trust framework and analyzes and validates traffic.
What Ethernet TAPs does[6]
Ethernet TAPs capture network traffic without impacting performance. Ethernet TAPs can be deployed as standalone TAPs or within SmartNA chassis for advanced traffic management.

Questions about Imperva and Network Critical

What do Imperva and Network Critical sell?
Imperva sells Web Application Firewall (WAF), Advanced Bot Protection, API Security, DDoS Protection, Client-Side Protection and 3 more. Network Critical sells Network TAPs, Packet Brokers, Hybrid TAP and Packet Broker, Bypass TAPs, INVIKTUS and 2 more.
Are Imperva and Network Critical in the same category?
They share DDoS protection. Imperva's primary category is WAF and WAAP and Network Critical's is Network visibility and traffic brokering.
Where are Imperva and Network Critical headquartered?
Imperva is headquartered in Redwood Shores, United States.
Who owns Imperva and Network Critical?
Imperva is owned by Thales.
Who are Imperva and Network Critical sold to?
From its own pages, Imperva sells mainly to organizations that need to protect applications and APIs in public or private cloud, hybrid and on-premises environments. Network Critical provides bypass TAPs for data centres running inline IPS, firewalls and DDoS mitigation tools.
What have Imperva and Network Critical announced recently?
August 24, 2026: Thales Imperva introduced the SSL Integration Center, a framework connecting Imperva Cloud WAF with certificate lifecycle management platforms, launching with a DigiCert integration.

About Imperva

Imperva sells an Application Security Platform that protects against application and API attacks without impacting legitimate users. Imperva Web Application Firewall (WAF) protects applications in any environment. Imperva Advanced Bot Protection protects websites, mobile apps and APIs from sophisticated automated attacks without impacting legitimate users.[4][9]

Imperva API Security provides continuous protection of all APIs using deep discovery and classification of sensitive data. Imperva DDoS Protection automatically mitigates DDoS attacks, safeguarding applications and networks while minimizing downtime. Imperva Client-Side Protection safeguards against client-side attacks like formjacking, digital skimming and Magecart and streamlines regulatory compliance with PCI DSS 4.0. Imperva's Secure Content Delivery Network (CDN) accelerates the delivery of content and applications while protecting against attacks.[9][13]

Imperva WAF protects applications in any environment, cloud or on-premises, and offers automated policy creation. Imperva says managed rules written and tested by the Imperva Threat Research team before deployment allow more than 94% of Imperva customers to deploy the Imperva WAF in blocking mode. Imperva’s Attack Analytics automatically correlates thousands of security alerts into narratives. Imperva’s Terraform provider automates Cloud WAF deployments.

Advanced Bot Protection safeguards websites, mobile apps and APIs from bot attacks, including all OWASP 21 Automated Threats. Imperva says its multi-layered approach detects malicious bots by combining direct client interrogation, behavior analysis, machine learning, connection characteristics and threat intelligence feeds. Imperva’s advanced DDoS protection defends against volumetric, protocol-based and Layer 7 attacks, with a 3-second SLA. Imperva offers a guaranteed 3-second mitigation SLA for Layers 3 and 4 DDoS attacks. Imperva DDoS Protection for Networks shields entire infrastructures with 13 Tbps of multi-terabit scrubbing capacity. Imperva DDoS Protection for Websites works alongside a cloud web application firewall (WAF) to block attacks and malicious bots.[11][12]

Imperva Client-Side Protection enables security teams to manage client-side resources and JavaScript while streamlining compliance with PCI DSS 4.0 requirements 6.4.3 and 11.6.1. Client-Side Protection automatically blocks known malicious domains based on data from the Imperva Threat Research Team. Client-Side Protection deployment uses the Imperva Cloud Application Security solution, with a fast detection process that starts within minutes. Imperva AI Application Security is engineered for the unique architecture of LLMs. AI Application Security operates as a SaaS reverse proxy positioned between applications and Large Language Models.[13][14]

Imperva Data Security Fabric is purpose-built for hybrid multicloud environments. Imperva provides centralized data security across legacy and modern cloud environments. Imperva data security reveals critical insight including sensitive data location, users, access, and risk. Imperva data security offers over 260 built-in integrations on an open platform to speed investigation and response. Imperva offers out-of-the-box support for over 100 data repositories, on-prem or in cloud.[15][16][18]

BSE uses Imperva Application Security and Imperva Data Security to help fortify its applications, APIs and data. Imperva Web Application Firewall, Advanced Bot Protection and API Security work together to stop malicious automation and protect retail business logic. Imperva Data Risk Analytics helps retailers comply with GDPR and CCPA requirements by using machine learning to identify suspicious data access. Imperva Cloud Security supports PCI and GDPR compliance mandates.[2][14][17]

Imperva on the record

Sources

Imperva full record

  1. [1]Thales completes acquisition imperva creating global leaderThales Group · thalesgroup.com · published December 4, 2023 · Tier A
  2. [2]AboutImperva · imperva.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Greg clark joins imperva board of directorsImperva · imperva.com · published June 4, 2014 · Tier A
  4. [4]Application securityImperva · imperva.com · published August 23, 2026 · Tier A
  5. [5]Cyber Security Leader | Imperva, Inc.Imperva · undated page, accessed October 25, 2026 · Tier A
  6. [6]Thales Launches Imperva for AWS to Help Organizations Protect Applications and APIsBusiness Wire · published August 3, 2026 · Tier A
  7. [7]Imperva Data Security Fabric Reviews & Product Details - G2G2 · undated page, accessed October 25, 2026 · Tier C
  8. [8]Thales Group (Imperva) Reviews - Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 25, 2026 · Tier C
  9. [9]Best Application Security | Imperva WAAP ProtectionImperva · undated page, accessed November 6, 2026 · Tier A
  10. [10]Web Application Firewall (WAF) | Cloud & On-Prem | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  11. [11]Advanced Bot Protection | Stop Advanced Bots | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  12. [12]Advanced DDoS Protection & Mitigation Services | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  13. [13]Client-Side Protection | PCI 4.0 Compliance | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  14. [14]Enterprise AI & LLM Security | Stop Prompt Injection | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  15. [15]Data Security Solutions | Protecting Data Everywhere | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  16. [16]Plans and Services | Imperva Cyber SecurityImperva · undated page, accessed November 6, 2026 · Tier A
  17. [17]Retail & eCommerce Cyber Security | Secure Online Transactions | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  18. [18]Data Security Fabric | Protect All Data Types | ImpervaImperva · undated page, accessed November 6, 2026 · Tier A
  19. [19]Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle ManagerImperva · published August 24, 2026 · Tier A

Network Critical full record

  1. [1]networkcritical.comNetwork Critical · networkcritical.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Stars group case studyNetwork Critical · networkcritical.com · undated page, accessed November 8, 2026 · Tier A
  3. [3]Aviation Case Study | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  4. [4]Network TAPs | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  5. [5]Passive Fiber TAPs | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  6. [6]Ethernet TAPs | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  7. [7]Network Visibility Solutions | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  8. [8]Hybrid TAP and Packet Broker | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  9. [9]Bypass TAPs for Inline Data Centre Security | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  10. [10]Network Bypass TAPs | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  11. [11]Healthcare Case Study | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  12. [12]OT Network Monitoring Solutions | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A
  13. [13]Data Diodes | Network CriticalNetwork Critical · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.