Imperva App Protect

Imperva's web app and API protection, now part of Thales.

Acquired by ThalesWAF and DDoSFree trial
Visit imperva.com ↗Last verified: 5 Nov 2026

Quote onlyPricing
Dec 2023Thales deal closed
3 WAF optionsCloud, gateway, Kubernetes
Free trialCloud WAF
The short version

What is Imperva App Protect today?

Imperva App Protect refers to Imperva's application security products: a web application firewall plus bot, API and DDoS protection. Imperva is now part of Thales, which completed its acquisition in December 2023, and the products are still sold.

Imperva no longer uses the name "App Protect" on its WAF page. The core product is its WAF, sold three ways: Cloud WAF (SaaS), WAF Gateway (deployed and managed on your own infrastructure) and Elastic WAF (Kubernetes-based, managed as SaaS). Around it sit Advanced Bot Protection, API Security, DDoS Protection, DNS Protection, Client-Side Protection, Account Takeover Protection and a CDN. Imperva publishes no prices. You can start a Cloud WAF free trial or book a demo.

Bottom line: Imperva fits companies that need an enterprise WAF with managed rules and compliance support, and that are fine with quote-based pricing. Small teams that want a published monthly price usually start with a self-serve WAF and CDN instead.

What it does

Key features

Web application firewall

Managed rules written and tested by Imperva Threat Research, covering SQL injection, XSS and other OWASP Top 10 threats.

Three ways to deploy

Cloud WAF as SaaS, WAF Gateway on your own infrastructure, or Elastic WAF for Kubernetes and CI/CD pipelines.

Bot and API protection

Advanced Bot Protection and API Security are integrated into Cloud WAF.

Attack Analytics

Machine learning groups related alerts into incident narratives, so related events are reviewed together.

What it costs

Imperva App Protect pricing (2026)

Plan Price What you get
Cloud WAF trial Free Start from imperva.com. Trial length not stated on the page.
Cloud WAF, WAF Gateway, Elastic WAF Quote only No prices published. Contact sales or book a demo.
Bot, API, DDoS and DNS protection Quote only Sold as separate products. No public prices.

Imperva lists no prices on its WAF page. Checked 5 Nov 2026.

Honest fit

Who it's for, who it isn't

Pick Imperva App Protect if

  • You need an enterprise WAF with managed rules
  • You must meet PCI DSS, HIPAA, GDPR or similar requirements
  • You want cloud, on-premises or Kubernetes deployment
  • You want bot, API and DDoS protection from one vendor

Look elsewhere if

  • You want a published price and self-serve checkout
  • You run one small site on a tight budget
  • You only need a CDN
What people ask

Imperva App Protect FAQ

Is Imperva still in business?

Yes, as part of Thales. Thales completed its acquisition of Imperva in December 2023. imperva.com still sells the WAF and related products.

What happened to Imperva App Protect?

The name is gone, the products are not. Imperva now sells this under Application Security: Cloud WAF, WAF Gateway, Elastic WAF, bot protection, API security and DDoS protection.

How much does Imperva cost?

Pricing is quote only. Imperva publishes no prices on its WAF page. You get a quote from sales.

Does Imperva have a free trial?

Yes, for Cloud WAF. The WAF page offers a free trial and a demo tour. The trial length is not stated.

Can Imperva run on-premises?

Yes. WAF Gateway is deployed and managed locally. Imperva also supports public cloud, private cloud and hybrid setups.

What are the alternatives to Imperva?

Other WAF and DDoS vendors. See our Imperva App Protect alternatives list.
Keep comparing

Imperva App Protect alternatives