Imperva Application Security Platform Reviews

• CDN
• DDoS protection
  

Basically, before we found Incapsula, we were getting hit with 5-10 gigabit DDoS attacks, and we were trying to figure out how to fight the attacks. Therefore, we tried Incapsula out on one site, and through the trial we saw what the solution could do – the attacker gave up after a few tries. Once we signed up for an enterprise account with all ten sites we saw the attacks drop weekly.

It would be nice to get a feed from Incapsula to import into our system. We have to have multiple dashboards open at the same time, and it would be nice to have one single dashboard with all our information.

I've used it for eight months.

No issues encountered.

No issues – it has been particularly stable.

Scalability has been pretty good, our European traffic has doubled and our sales have gone up along with our stability.

10/10

10/10 – within 5 minutes we have had a response.

We used a NetScaler mitigation appliance – nothing worked that well, we were getting attacks and they were taking down services.

Setup was fairly straightforward. It took about 10 minutes as I had to fine tune it with our API to mitigate what traffic was being blocked. I was able to determine that pretty quickly and adjust accordingly.

We did it in-house.

Probably about $150,00-$190,000 savings. It's hard to predict, but that would be my ROI estimate.

It costs around $7/month, really cheap.

We looked at CloudFlare. We tried it but it didn’t work that well.

Make sure you use a premium DNS provider. We had to move from a basic DNS provider to a more complex one to get it work with Incapsula 100%.

The features that are most valuable are the protection against denial-of-service attacks and all kinds of other internet attacks. The presence of Incapsula helps us answer the compliance requirements for IT security, as our clients require IT security compliance, and it's very important to our enterprise customers that we comply with the requirements.

Another important feature is that it doesn’t require us to move our DNS service to Incapsula like other services. It allows us to maintain our network in our current configuration. It works well with the Amazon cloud we use and doesn’t require us to re-configure our network.

Its user interface could be improved, as the competition looks better, but it doesn’t really need improvements in its functionality. We would like to have more reports and real-time views. Basically, the core functionality is great.

We have been using the solution for six months.

No issues encountered.

As far as I can see it's got great stability.

No issues with the scalability.

8/10 – they were responsive.

8/10

It doesn’t require any changes in code, so it's very easy to implement.

We implemented it by ourselves, and it took an hour, and was very easy.

It's very difficult in security products to evaluate the ROI, but we definitely feel it has helped us with compliance – we get projects and customers we wouldn’t get if we didn’t have Incapsula. It's not something you can measure – we have no other option but to use the solution, it’s a necessity.

We tried the competition, Cloudflare, we even used them, but Incapsula is more suitable to use for web/mobile applications, and that is how we use it.

• Caching and CDN
• WAF

We are using caching and CDN heavily, for certain campaigns we ended up in 80%+ of all the traffic served by Incapsula without passing to the origin servers.

We were PCI-complaint before using Incapsula; however, it is always better to have one more layer of security.

No DDOS attacks for now, but let's see once we face it.

Caching rules are really basic now and lots of space for improvement here.

- For example, Incapsula does not check the protocol (HTTP vs. HTTPS) when serving cached pages.

- There is no possibility to create a caching rule based on a regular expression.

No issues encountered.

No issues encountered.

No issues encountered.

Their support team is great and you get a response/resolution within five minutes of submitting a support ticket.

You can save some licenses/money if you have your own load balancer. No matter how many websites your load balancer is serving, you will need only one Incapsula ‘website’. We’ve managed to use two Incapsula ‘websites’ to serve approximately 150 real websites.

• Web security
• Protection against DDoS
• Easy to use administration portal
• Reports
• It’s simple to configure
• Very effective
• Easy solution to administer for protecting websites of all sizes

Any website that we publish on the web needs to be fully protected. In hosting environments, installing an on-premise WAF solution or other security device is not feasible. Incapsula provides a very simple to install and configure solution, that can be up and running in minutes. Also, now, we don’t have to worry about the security of the website, or if the bandwidth needs to be increased, as everything is automatic.

It would be nice to have a mobile app as a dashboard interface instead of the web administration, but the service is really great. The product is the best at what it does.

I've used it for three years.

Once the DNS configuration is done, everything works flawlessly.

No issues encountered.

No - in a large scale attack, the protection scaled without problem.

Service is good and prompt, 9/10.

I haven’t had much need for tech support.

We previously used Cloudflare. Although a very good solution, it forces users to completely give up the DNS management of their domain, which most enterprises don’t want to do. Incapsula only needs a redirection of the actual web entry.

Very straightforward. The default settings work very well and are running within minutes. Configuration of advanced features is simple and fast.

Through our own in-house team.

It’s difficult to measure, but without Incapsula, we would be forced to host the website on-premises, with very high costs. ROI is probably within six months.

Setup cost was zero. Annual cost is $7,200.

We evaluated Cloudflare as well.

This is very simple to install. Websites that use SSL should pre-export their certificates and be ready to import them into Incapsula.

• Human contact
• Fast SLA
• Trustworthy and excellent communication

Highly-functional back office with user friendly reports and intelligence on bad IPS and malicious software is at very high level and very quick. Part of the solutions function is that they have to stay on top of the data intelligence game. They have the first knowledge of break points.

The product makes information readily available and mitigates any problems quickly.

With the way that protection works, there is no such thing as pure protection, but as soon as Incapsula knows what a problem looks like, they fix it. They have to stay on top of the data intelligence game.

I've used it for three years.

It's usually fast but it can take two to three days on a big operation to get it live, especially if there is tracking.

No problem with scalability.

Communication declined a bit as they got bigger – 7/10. Service is really good though.

8/10. Service is good.

We went through at least a quarter million dollars in DDoS firewalls before we got to them. We tried solutions worldwide.

For enterprise level stuff pricing is very competitive. Very good corporate deals.

Go for it if you’re looking into it – they are a good solution and are trustworthy people. Just really works.

• DDOS defence
• Load balancing
• Security role

The availability of our sites, thanks to the load balance functionality, has improved. It enables the site to be available all the time, despite people trying to attack it.

More features to help fine tune it. In general, more features for the platform would be nice.

I’ve used it for two to three years.

I used the customer service once.

Once or twice, there has been downtime, but it was only a matter of minutes.

No issues encountered.

It was pretty high quality service. They guarantee to fix your problem within 15 minutes, but they don’t always keep their word.

They are professional people who provide solutions.

No previous solution used.

It was very simple.

It was done in-house.

The price is between $5,000 and $10,000.

The product experience is really easy, therefore you should go and experience it.

Their WAS - I had a problem and I turned to Incapsula. I needed someone to protect the website and they succeeded in this regard.

We’re not an e-commerce site, but a website for providing information, and we needed someone to protect the website. The user-generated spam stopped after we started using Incapsula, and so we feel more secure.

I needed some support and according to the SLA and I couldn’t get telephone support and it took a little while till they got back to me. We’re an enterprise company so I think I would be happier for a bit more support to pick the phone up and ask a question. There was not as much back office help as we would have liked.

I’ve used it for four months.

Yes, we had some down time but we solved it. It took us a few hours although we were promised no down time.

No issues with stability, but I still have to look into whether the site speed was faster than it was before as promised.

No issues with scalability.

8/10 – very professional.

8/10 – very professional once they got back to me.

I didn’t use any other solution.

It’s not costly for my needs.

I knew the solutions available in the market because I was working in a cyber-security company. I suggested the product, because I knew the product and that they are better than other solutions for my needs.

Do it on a Sunday in case there is down time. I would ask for support after implementation, and check that the site speed is as fast as it should be.

The Web Application firewall is a valuable feature as the security features are mostly what we're interested in.

We hope that the product helps protect us from potential threats, hackers etc. that compromise our website and services. We want peace of mind. The fact that nothing has occurred is a good thing.

We’ve had a few, short outages that didn't have an impact on the business. One outage lasted a couple of hours, so the reliability could be improved.

At times, we can prove the service is not running, but technical support doesn’t reflect that fact. We appreciate that nothing is 100% reliable, but we'd appreciate more information during an outage and not after the fact.

Also, reporting could be improved. We shouldn’t have to look on Twitter to see if others are experiencing a similar issue. Greater transparency is needed when there is an issue.

I've used it for about two years.

No issues at all.

We have had a few outages.

No issues on that front as we haven’t needed to scale it.

Average to poor.

Average to poor.

Yes, we used Barracuda. The product was not difficult to configure but it didn’t work well. There was high latency in the product.

It was straightforward.

Cost is OK. It’s more expensive than CloudFlare and Amazon but it’s got better features. We are happy with the price, its just the information and reliability, otherwise we would be happy to give a glowing recommendation.

We looked at CloudFlare, but they don’t offer the same security features. Incapsula was selected because of the uniqueness of the security features.

I think it’s a leading product, a market leader; that’s how it feels to us. But I don’t think it would be a good product if i'ts mission critical. You'd need to proceed with a certain amount of caution because we haven’t had 100% uptime.