Imperva Application Security Platform Reviews

The Web Application Firewall (WAF) is very helpful in protecting SQL injections by hackers.

We implemented the WAF feature of Incapsula in our application which was exposed to the public.

This implementation helped our organization a lot in handling web attacks by hackers and other malicious intruders.

There is nothing as of now that I could suggest.

We faced a bit of difficulty during setup, but the issue was resolved easily.

I don't know because licensing is handled by PIR infrastructure and software team.

We have just been provided a license to use the product.

You can safely implement it irrespective of your application usage size.

I'd say that the most valuable feature is the ease of use in configuration, the analytics, and the integration with Incapsula’s robot database.

The product should be able to protect us from illegitimate web traffic, and reduce our data center costs through lowering the load on our systems.

The interface seems a bit outdated and simplistic.

I have been familiar with it for a few months now.

No issues with deployment.

No issues with stability.

No issues with scalability thus far; we haven’t tried yet.

Fairly low – I’m in between Incapsula sales people so it’s hard to answer, but I have had trouble getting answers to my questions.

I like the product so I am happy with that but getting to them was not simple.

They had one thing they had to do and they did that – was pretty straightforward.

Yes, we were using Barracuda Web App Firewall which we retired several years ago.

It was straightforward.

I implemented on my own.

Per month, the cost varies between $200 to $2,000, and there's no initial setup cost.

I would say compare it to other solutions in the marketplace feature by feature and see how Incapsula reporting and analytics dashboards compare and bot control compares – their solution for bot control is pretty good – and check those features with other enterprise level solutions, you get a lot for your money.

• CDN
• DDoS protection
  

Basically, before we found Incapsula, we were getting hit with 5-10 gigabit DDoS attacks, and we were trying to figure out how to fight the attacks. Therefore, we tried Incapsula out on one site, and through the trial we saw what the solution could do – the attacker gave up after a few tries. Once we signed up for an enterprise account with all ten sites we saw the attacks drop weekly.

It would be nice to get a feed from Incapsula to import into our system. We have to have multiple dashboards open at the same time, and it would be nice to have one single dashboard with all our information.

I've used it for eight months.

No issues encountered.

No issues – it has been particularly stable.

Scalability has been pretty good, our European traffic has doubled and our sales have gone up along with our stability.

10/10

10/10 – within 5 minutes we have had a response.

We used a NetScaler mitigation appliance – nothing worked that well, we were getting attacks and they were taking down services.

Setup was fairly straightforward. It took about 10 minutes as I had to fine tune it with our API to mitigate what traffic was being blocked. I was able to determine that pretty quickly and adjust accordingly.

We did it in-house.

Probably about $150,00-$190,000 savings. It's hard to predict, but that would be my ROI estimate.

It costs around $7/month, really cheap.

We looked at CloudFlare. We tried it but it didn’t work that well.

Make sure you use a premium DNS provider. We had to move from a basic DNS provider to a more complex one to get it work with Incapsula 100%.

The features that are most valuable are the protection against denial-of-service attacks and all kinds of other internet attacks. The presence of Incapsula helps us answer the compliance requirements for IT security, as our clients require IT security compliance, and it's very important to our enterprise customers that we comply with the requirements.

Another important feature is that it doesn’t require us to move our DNS service to Incapsula like other services. It allows us to maintain our network in our current configuration. It works well with the Amazon cloud we use and doesn’t require us to re-configure our network.

Its user interface could be improved, as the competition looks better, but it doesn’t really need improvements in its functionality. We would like to have more reports and real-time views. Basically, the core functionality is great.

We have been using the solution for six months.

No issues encountered.

As far as I can see it's got great stability.

No issues with the scalability.

8/10 – they were responsive.

8/10

It doesn’t require any changes in code, so it's very easy to implement.

We implemented it by ourselves, and it took an hour, and was very easy.

It's very difficult in security products to evaluate the ROI, but we definitely feel it has helped us with compliance – we get projects and customers we wouldn’t get if we didn’t have Incapsula. It's not something you can measure – we have no other option but to use the solution, it’s a necessity.

We tried the competition, Cloudflare, we even used them, but Incapsula is more suitable to use for web/mobile applications, and that is how we use it.

• Caching and CDN
• WAF

We are using caching and CDN heavily, for certain campaigns we ended up in 80%+ of all the traffic served by Incapsula without passing to the origin servers.

We were PCI-complaint before using Incapsula; however, it is always better to have one more layer of security.

No DDOS attacks for now, but let's see once we face it.

Caching rules are really basic now and lots of space for improvement here.

- For example, Incapsula does not check the protocol (HTTP vs. HTTPS) when serving cached pages.

- There is no possibility to create a caching rule based on a regular expression.

No issues encountered.

No issues encountered.

No issues encountered.

Their support team is great and you get a response/resolution within five minutes of submitting a support ticket.

You can save some licenses/money if you have your own load balancer. No matter how many websites your load balancer is serving, you will need only one Incapsula ‘website’. We’ve managed to use two Incapsula ‘websites’ to serve approximately 150 real websites.

• Web security
• Protection against DDoS
• Easy to use administration portal
• Reports
• It’s simple to configure
• Very effective
• Easy solution to administer for protecting websites of all sizes

Any website that we publish on the web needs to be fully protected. In hosting environments, installing an on-premise WAF solution or other security device is not feasible. Incapsula provides a very simple to install and configure solution, that can be up and running in minutes. Also, now, we don’t have to worry about the security of the website, or if the bandwidth needs to be increased, as everything is automatic.

It would be nice to have a mobile app as a dashboard interface instead of the web administration, but the service is really great. The product is the best at what it does.

I've used it for three years.

Once the DNS configuration is done, everything works flawlessly.

No issues encountered.

No - in a large scale attack, the protection scaled without problem.

Service is good and prompt, 9/10.

I haven’t had much need for tech support.

We previously used Cloudflare. Although a very good solution, it forces users to completely give up the DNS management of their domain, which most enterprises don’t want to do. Incapsula only needs a redirection of the actual web entry.

Very straightforward. The default settings work very well and are running within minutes. Configuration of advanced features is simple and fast.

Through our own in-house team.

It’s difficult to measure, but without Incapsula, we would be forced to host the website on-premises, with very high costs. ROI is probably within six months.

Setup cost was zero. Annual cost is $7,200.

We evaluated Cloudflare as well.

This is very simple to install. Websites that use SSL should pre-export their certificates and be ready to import them into Incapsula.

• Human contact
• Fast SLA
• Trustworthy and excellent communication

Highly-functional back office with user friendly reports and intelligence on bad IPS and malicious software is at very high level and very quick. Part of the solutions function is that they have to stay on top of the data intelligence game. They have the first knowledge of break points.

The product makes information readily available and mitigates any problems quickly.

With the way that protection works, there is no such thing as pure protection, but as soon as Incapsula knows what a problem looks like, they fix it. They have to stay on top of the data intelligence game.

I've used it for three years.

It's usually fast but it can take two to three days on a big operation to get it live, especially if there is tracking.

No problem with scalability.

Communication declined a bit as they got bigger – 7/10. Service is really good though.

8/10. Service is good.

We went through at least a quarter million dollars in DDoS firewalls before we got to them. We tried solutions worldwide.

For enterprise level stuff pricing is very competitive. Very good corporate deals.

Go for it if you’re looking into it – they are a good solution and are trustworthy people. Just really works.

• DDOS defence
• Load balancing
• Security role

The availability of our sites, thanks to the load balance functionality, has improved. It enables the site to be available all the time, despite people trying to attack it.

More features to help fine tune it. In general, more features for the platform would be nice.

I’ve used it for two to three years.

I used the customer service once.

Once or twice, there has been downtime, but it was only a matter of minutes.

No issues encountered.

It was pretty high quality service. They guarantee to fix your problem within 15 minutes, but they don’t always keep their word.

They are professional people who provide solutions.

No previous solution used.

It was very simple.

It was done in-house.

The price is between $5,000 and $10,000.

The product experience is really easy, therefore you should go and experience it.