Imperva DDoS Reviews

What is most valuable?

How has it helped my organization?

We currently host over 1,100 websites and our clients include some of Australia's best known online retail success stories and its largest eBay trader. The nature of the e-commerce business poses a wide range of challenges that we need to deal with on a daily basis in order to keep our clients' online stores up and running. For our clients, time is (literally) money and it’s our responsibility to make sure that all potential problems are handled quickly, before they affect any business transactions.

Security is obviously an issue we couldn’t afford to ignore. We spent several months searching for a solution that could meet our clients' demanding security and performance requirements. As it happened, Incapsula had just opened a new data center in Australia, so we decided to give them a try as well. Their cloud-based service won us over - hands down.

To help companies out there facing similar issues, I wanted to share five key factors that influenced our decision to implement Incapsula.

1. Reseller Support and Integration Options Integration of new services can be difficult, both from marketing and technology standpoints. Thankfully, Incapsula provided plenty of options, including a cPanel integration and an extremely user-friendly API with interesting reseller-oriented capabilities.

While reviewing these tools, we came up with a lot of integration ideas. We batted these ideas back and forth with Incapsula's responsive support team and came back impressed with their ability to provide quick and complete answers to our questions.

Integration always takes time. While we are still working on ours, we know that having the right tools is half the battle. Having the right support makes the other half just a matter of time.

2. Comprehensive Security The commercial potential of e-commerce sites makes them a lucrative target for an ever-growing array of threats, from code-based vulnerabilities to DDoS attacks. Accordingly, we understand that our clients require reliable security solution, to protect their hosted sites from all types of threats and keep things running as smooth as possible.

We also know that by taking on more merchants and increasing our total web presence we increase the likelihood of becoming a target. For fast growing hosting platforms, where multiple sites used shared resources, this is a serious issue. After all, the entire server is only as strong as its "weakest link," and one unprotected site can cause substantial collateral damage to our clients, as well as to our own brand reputation and business goals.

For that reason it was important for us to have a comprehensive solution that helps us cover all bases. With its PCI compliant WAF, DDoS protection and bot filtering technologies, Incapsula helps us do just that – protecting our clients from targeted and automated cyber threats. Today, as Incapsula gets adopted by more and more of our clients, the result is a continual improvement in the resilience of our entire hosted community.

3. No Sweat PCI Compliance PCI compliance is a must for our e-commerce clients so it was important for us to know that Incapsula’s WAF is certified by the PCI Security Standards.

Anyone that ever dealt with PCI DSS knows about the dreaded 6.6 requirement. Incapsula meets these specifications with ease, by providing a PCI-compliant WAF for a ridiculously small fraction of the usual price. Basically, it offers a $60 solution to a problem that can easily cost tens of thousands of dollars to address.

4. Great Value at a Price Your Clients Can Afford To ensure that our clients would benefit from these added-value services, they had to be affordable. Otherwise, no one would sign up. Incapsula's "economy of scale" pricing model made this possible.

As mentioned, the WAF alone would cost somewhere between $10,000 -$30,000, before man-hours and maintenance fees. Incapsula's bundled service also includes a CDN, dynamic caching, DDoS protection and other features, making it a highly attractive and cost-effective solution for commercial sites.

This combination of top-tier technology and mid-market prices makes Incapsula a perfect fit for our merchant clients and still allows us to retain a good reseller margin. Incapsula’s security and performance services also enhance the value of our overall offering, improving our client acquisition and retention to further increase our bottom line.

5. A Partner Who's Got Your Back Most importantly, it's very assuring to know that our own internal team is always backed up by a team of security and networking experts. Incapsula's technical, support and marketing teams have been extremely responsive, reliable and flexible. They worked with us through the initial roll out, and were quick to handle a few minor teething issues, even making changes to their standard system to meet our needs.

Having a partner who goes the extra mile means a lot and really reinforces our trust, both in the technology itself and in the people behind the technology.

Our company has recently reached 3.5 million registered users and 200,000 hosted websites. Daily DDoS attacks on our platform resulted in unnecessary and prolonged downtime for the thousands of sites on our network. These attacks included network level (layer 3 & 4) attacks ranging from 2Gbps to 10Gbps with various attack vectors such as UDP attacks but most commonly SYN floods which exploit the TCP three-way handshake to consume the server’s connection resources. The more challenging attacks were the diverse application level (Layer 7) attacks. These attacks seem as if they are originating from legitimate sources, try to mimic human behavior and consume the backend computing resources of the website.

We were seeing daily DDOS attacks, sometimes multiple DDOS attacks in parallel on various client websites. Since our company is a global hosted community platform and social network, everyone was affected at the same time. We needed to make sure that no attack on any one website could bring other websites down. We have gone through paid evaluations of several DDoS Mitigation services, but all of them failed to block DDOS attacks automatically without serious side effects, as blocking legitimate visitors

Once we decided to evaluate Incapsula's Cloud-Based DoS protection, Incapsula's team quickly helped us to setup a few of our websites on the service.

Once we joined Incapsula, they immediately identified that our network was under various types of attacks at almost any given time, both network and application level attacks.

While the network based attacks were absorbed by Incapsula’s backbone, the application layer attacks were very diverse. Incapsula relied very heavily on their bot detection and progressive DDoS challenge technology, to block 100% of attackers transparently, without incurring any noticeable effect to almost all of the real users.

Maintaining the best possible customer experience was a key consideration for us. It was very apparent why other DDoS protection services that involve delays, CAPCHAs and other side effect on visitors' would not work for us. Also, a DDoS solution that isn't fully automated, would keep our team constantly busy to enable/disable the protection service.

Incapsula’s ability to allow human and legitimate bot traffic to access the website with no interruption, while filtering network and application level DDoS traffic, allowed us to put our DDoS problems behind and focus on what we do best, which is building a great platform for the online gamers community.

Incapsula is now a critical component of our security infrastructure. All traffic to our network and hosted websites passes through Incapsula for screening. Malicious traffic and DDOS attacks are blocked automatically.

We take advantage of Incapsula's DDoS Protection key benefits, to secure our online properties:

• Protection against Network and Application Level Attacks- Through a worldwide network of multi-gigabit scrubbing centers and unique bot (automation) detection technology, Incapsula provides complete protection for both network (Layer 3 & 4) and application level (Layer 7) DDoS attacks.
• 24x7 Managed Security Service- Incapsula’s DDoS security team monitors attacks and is available on-demand before, during or after attacks to ensure that our sites are up and running and performing.
• vZero Business Disruption- Incapsula’s CDN and bot detection technology ensure that even under attack, our website traffic is accelerated and legitimate visitors are not delayed or denied access to our sites.

Our network was finally clear from the endless onslaught of crippling UDP & SYN flood attacks that we had been experiencing. Using Incapsula's dashboard, we were able to see exactly when each attack was happening, and continue delivering service to millions of users during the attack. We also saw a sharp drop in unwanted bot activity, which resulted in a 20% drop in load on our servers. A key feature we were looking for is a very low false positive rate during mitigation. Incapsula proved to have a near zero false positive rate, and legitimate users had no trouble accessing our websites during prolonged DDOS attacks.

How has it helped my organization?

What is most valuable?

What needs improvement?

For how long have I used the solution?

What do I think about the stability of the solution?

What do I think about the scalability of the solution?

How are customer service and technical support?

Which solution did I use previously and why did I switch?

How was the initial setup?

What's my experience with pricing, setup cost, and licensing?

Which other solutions did I evaluate?

What other advice do I have?

How has it helped my organization?

What is most valuable?

What needs improvement?

For how long have I used the solution?

What do I think about the stability of the solution?

What do I think about the scalability of the solution?

How are customer service and technical support?

Which solution did I use previously and why did I switch?

How was the initial setup?

What's my experience with pricing, setup cost, and licensing?

Which other solutions did I evaluate?

What other advice do I have?

What is most valuable?

How has it helped my organization?

What needs improvement?

For how long have I used the solution?

What do I think about the stability of the solution?

What do I think about the scalability of the solution?

How are customer service and technical support?

Which solution did I use previously and why did I switch?

How was the initial setup?

What's my experience with pricing, setup cost, and licensing?

Which other solutions did I evaluate?

What other advice do I have?

I was introduced to Incapsula after our company website had started to show signs of a persistent active DDoS attack.

I got on the phone with their representative, who later brought in an engineer and within that same day we were able to begin mitigating the problem, all under the free trial. We were able to easily dial in the security and protection that the service provided and began to understand the threat (which was not a DDoS attack) quickly.

We were so impressed with the effectiveness of the solution and the assistance that we received from support that we subscribed to their service in an ongoing basis, which has proven to be reliable and simple to use.

However, I'd like to be able to drill down more into the analytics that Incapsula collects. For example, I'd like to be able to click on the pieces of the pie charts to get more detailed info. also, we had a small issue with some vagueness in the installation instructions, but we sorted it out and everything was good from that point on.

They helped us to get the solution up and running, as well as assisted in setting up rules and other security settings that improved the overall effectiveness of the solution. I would recommend Incapsula's solution to anyone looking to add a robust security layer to their web sites and properties.

What is most valuable?

How has it helped my organization?

What needs improvement?

For how long have I used the solution?

What was my experience with deployment of the solution?

What do I think about the stability of the solution?

What do I think about the scalability of the solution?

How are customer service and technical support?

Which solution did I use previously and why did I switch?

How was the initial setup?

What about the implementation team?

What was our ROI?

What's my experience with pricing, setup cost, and licensing?

Which other solutions did I evaluate?

What other advice do I have?