Startup Stash is one of the world's largest online directory of tools and resources for startups
Imperva's web app and API protection, now part of Thales.
Imperva App Protect refers to Imperva's application security products: a web application firewall plus bot, API and DDoS protection. Imperva is now part of Thales, which completed its acquisition in December 2023, and the products are still sold.
Imperva no longer uses the name "App Protect" on its WAF page. The core product is its WAF, sold three ways: Cloud WAF (SaaS), WAF Gateway (deployed and managed on your own infrastructure) and Elastic WAF (Kubernetes-based, managed as SaaS). Around it sit Advanced Bot Protection, API Security, DDoS Protection, DNS Protection, Client-Side Protection, Account Takeover Protection and a CDN. Imperva publishes no prices. You can start a Cloud WAF free trial or book a demo.
Bottom line: Imperva fits companies that need an enterprise WAF with managed rules and compliance support, and that are fine with quote-based pricing. Small teams that want a published monthly price usually start with a self-serve WAF and CDN instead.
Managed rules written and tested by Imperva Threat Research, covering SQL injection, XSS and other OWASP Top 10 threats.
Cloud WAF as SaaS, WAF Gateway on your own infrastructure, or Elastic WAF for Kubernetes and CI/CD pipelines.
Advanced Bot Protection and API Security are integrated into Cloud WAF.
Machine learning groups related alerts into incident narratives, so related events are reviewed together.
| Plan | Price | What you get |
|---|---|---|
| Cloud WAF trial | Free | Start from imperva.com. Trial length not stated on the page. |
| Cloud WAF, WAF Gateway, Elastic WAF | Quote only | No prices published. Contact sales or book a demo. |
| Bot, API, DDoS and DNS protection | Quote only | Sold as separate products. No public prices. |
Imperva lists no prices on its WAF page. Checked 5 Nov 2026.