Imperva Application Security Platform Reviews

• Faultless inlining & minification: Every competing product breaks the layout, but we are yet to see Incapsula break a site
• Installation requires just a CNAME entry, avoiding the risk of email downtime.
• Instant PCI compliance and protection from the OWASP Top 10 vulnerabilities.
• CDN & DDoS protection.

Incapsula delivers a massive improvement to website performance and security in less than 20 minutes, regardless of the CMS. We love it so much that we decided to create a new service around this product, which could result in our largest income stream yet.

They once terminated a free account without warning, resulting in a few days downtime. But you get what you pay for.

I have been using it for two years.

I have not encountered any stability issues.

I have not encountered any scalability issues.

Technical support is first class. These guys are sharp.

We moved from CloudFlare because Incapsula’s minification was faultless, and their CNAME installation procedure avoided downtime for other services such as email.

It was very easy to set up: 20 minutes and you're done.

Go for the $59/month Pro plan. Free accounts can get terminated, and the higher plans are only if you like to have your own SSL certificate, or get regular DDoS attacks. The Pro plan has everything you need; it's just that you're using Imperva's SSL certificate, not yours.

Before choosing this product, we evaluate other options in great detail. We looked at CloudFlare, W3 Total Cache, WP Super Cache, Wordfence, BulletProof Security, Varnish, Mod_Security, ConfigServer, and a variety of other options. Incapsula isn't the cheapest, but is way in front of the competition. You'll easily spend double/triple the cost of your Incapsula subscription on maintaining any other solution, whereas Incapsula handles all that overhead for you, right out of the box.

Don't wait till you've been hacked; get protected now. It'll cost you at least a year of Incapsula fees to recover from website hacking. And if your website is running slow, Google is probably already penalising your site, when the fix is so easy. Incapsula is by far the fastest fix for both website speed and security.

The added security is the biggest bonus feature, as our websites are not usually under extreme load but do have highly sensitive data. A good WAF can be difficult enough to configure even without many of the advanced security features that Imperva Incapsula includes: SQL injection prevention, bot attack recognition and notification, and DDoS.

Our audit experience is made much more simple due to having this solution. It is an answer to many security issues. We have all of the same sites available and audited internally. This extra layer of security helps with the external 'monitoring and alerting' and keeps that heavy administration portion to those who can handle it at scale a lot easier.

The API is lackluster but especially for 'customers'. The only thing we wanted to use the API for was only available to resellers.

I have been using it for 5+ years.

I have not encountered any stability issues at all.

We have a multitude of DNS names for essentially the same site. Despite that, we have to pay for each of these separately as different sites. This model is unfortunate for us but we find the service to be worth it. I could see this being a potential issue, while it is not yet.

I have had to contact support only once for API support and it was a good experience.

Initial setup was simple but admittedly handled by a different person. I have set up and decommissioned sites with ease.

You get a better bang for your buck with converged DNS site names. If you use separate DNS for smaller portions of a site, it will increase your licensing cost.

Before choosing this product, I did not evaluate other options.

Keep your sites strongly secured but sleep easier knowing Imperva Incapsula continuously baffles our penetration testers.

• DDoS Protection
• Load Balancing

Incapsula’s DDoS Protection and Load Balancing really helped maximize our security. It added an extra layer of protection.

Threat monitoring allows us to save time when responding to an incident. Previously we would have had to analyze logs, generate reports which takes time that could be spend remediating issues. Incapsula gives an uncomplicated overview of what is happening among other things.

Incapsula's DDoS protection service delivers immediate and comprehensive protection for both network and application level (Layer 7). DDoS is a hugely beneficial feature.

• It provides real-time traffic analysis.
• It gives location/hit/page view details.
• It can easily and instantly block IPs.
• We can investigate questionable and suspicious IPs.

We're able to better manage network traffic with its analysis and security tools.

It also helped us investigate and narrow down possible attacks from thousands of hits from suspicious IPs. In so doing, it also noted the presence of background scripts.

It's helped us find vulnerabilities in our organization.

• Its firewall should be made less penetrable so that if an IP is blocked once, it doesn't penetrate again.
• The IP analytics should show trends and potential problem areas so that We can take action to minimize the occurrence of more hits from malicious IPs.
• The process of reporting, analysis, and clearance could be improved.

• CDN
• Site performance

The website itself is our first priority and we have seen improvements in that area -- it's faster.

Although we're only using it for the accelerator part, the purging of files and the way this feature functions could use improvement. It requires the user to either purge everything or go through specific files, but if you do, the latter doesn’t always work. So with the single files sometimes there is more difficulty.

I've used it for a few months now.

No issues. It was very straightforward.

No issues.

It meets our needs right now. In the following months we are well within our package, but in the long term, we have to see if the cost will go up too much for our project’s needs. We are well covered for now.

9.5 -- they're very good.

9.5 -- turnaround is very fast.

No, as we are a fairly new project so we have no other experience with another solution. However, we did look at CloudFlare, Limelight, and CDN networks.

I had a gut feeling about the product right from the get-go.

Very straightforward setup.

It really depends what you're looking for. If you need to have a straightforward CDN, this CDN would probably be too expensive. If you want one solution with an all-in-one package for CDN and acceleration, I would definitely recommend Incapsula.

The Web Application Firewall (WAF) is very helpful in protecting SQL injections by hackers.

We implemented the WAF feature of Incapsula in our application which was exposed to the public.

This implementation helped our organization a lot in handling web attacks by hackers and other malicious intruders.

There is nothing as of now that I could suggest.

We faced a bit of difficulty during setup, but the issue was resolved easily.

I don't know because licensing is handled by PIR infrastructure and software team.

We have just been provided a license to use the product.

You can safely implement it irrespective of your application usage size.

I'd say that the most valuable feature is the ease of use in configuration, the analytics, and the integration with Incapsula’s robot database.

The product should be able to protect us from illegitimate web traffic, and reduce our data center costs through lowering the load on our systems.

The interface seems a bit outdated and simplistic.

I have been familiar with it for a few months now.

No issues with deployment.

No issues with stability.

No issues with scalability thus far; we haven’t tried yet.

Fairly low – I’m in between Incapsula sales people so it’s hard to answer, but I have had trouble getting answers to my questions.

I like the product so I am happy with that but getting to them was not simple.

They had one thing they had to do and they did that – was pretty straightforward.

Yes, we were using Barracuda Web App Firewall which we retired several years ago.

It was straightforward.

I implemented on my own.

Per month, the cost varies between $200 to $2,000, and there's no initial setup cost.

I would say compare it to other solutions in the marketplace feature by feature and see how Incapsula reporting and analytics dashboards compare and bot control compares – their solution for bot control is pretty good – and check those features with other enterprise level solutions, you get a lot for your money.