Thales WAF (Web Application Firewall)

Web Application Firewall protects web applications against OWASP Top 10 threats, zero-day attacks, and complex application-layer threats. It supports both positive and negative security models together. Automatic policy recommendations and Threat Intelligence integration minimize the need for manual intervention.

Key Features

• Automatic attack signature updates and global Threat Intelligence
• Positive security model + negative signature-based protection
• Ability to work integrated with API Discovery and API protection
• Detailed logging, reporting, and SIEM integration
• High-performance traffic inspection (millions of requests/second)

Deployment Types

• Cloud WAF / On-Prem WAF / Hybrid Deployment / Elastic WAF

RASP - Runtime Application Self-Protection

RASP is a technology that enables an application to protect itself during its own runtime. Injected at the code or container level, it blocks in-application attacks (SQL injection, deserialization attacks, command injection) in real time. It detects in-application threats that traditional WAFs cannot see.

Advanced Bot Protection and Account Takeover Protection

Advanced bot management separates well-intentioned bots from malicious bots (credential stuffing, content scraping, DDoS bots). Account Takeover Protection blocks login attempts made with stolen credentials through behavioral analysis and risk scoring.