From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Imperva Inc.
IndustryIT security
FounderShlomo Kramer, Amichai Shulman, Mickey Boodaei Edit this on Wikidata
United States
Area served
Key people
Pam Murphy (CEO)
ProductsSecurity Software and Services
OwnerThoma Bravo
Number of employees
1000+ (January 2020)

Imperva is a cyber security software and services company which provides protection to enterprise data and application software. The company is headquartered in Redwood Shores, California.


Imperva, originally named WEBcohort, was founded in 2002 by Shlomo Kramer, Amichai Shulman and Mickey Boodaei.[1] The following year the company shipped its first product, SecureSphere Web Application Database Protection, a web application firewall.[2] In 2004, the company changed its name to Imperva.[3]

In 2011, Imperva went public and was listed on the New York Stock Exchange (NYSE: IMPV).[4] In 2014, the company acquired the remaining shares of Incapsula, a Cloud Application Security Broker CASB startup named SkyFence, and real-time mainframe security auditing agents from Tomium Software.[5] In August 2014, Imperva named Anthony Bettencourt CEO.[6]

In 2016, Imperva published a free scanner designed to detect devices infected with, or vulnerable to, the Mirai botnet.[7] In February 2017, Imperva sold Skyfence to Forcepoint for $40 million.[8] In February 2017, Imperva purchased Camouflage, a data masking company.[9]

In August 2017, Imperva named Chris Hylen, the former CEO of Citrix GetGo, as its new president and CEO.[10] Imperva's former CEO, Anthony Bettencourt, resigned as chairman of the board of directors in February 2018.[11] In August 2018, Imperva acquired Prevoty, a runtime application self-protection (RASP) security company.[12] Also in 2018, Imperva identified a bug in the popular web browser Google Chrome which had been allowing attackers to steal information via HTML tags for audio and video files.[13]

In 2019, Imperva was acquired by private equity firm Thoma Bravo.[14] In July of that year, Imperva acquired Distil Networks for its bot management capabilities. Imperva then suffered a breach of its own when it notified customers that it learned about a security incident that exposed sensitive information for some users of Incapsula, the company’s cloud-based Web Application Firewall (WAF) product.[15]CEO Chris Hylen left in October 2019 and Thoma Bravo Chairman of the Board, Charles Goodman, became interim CEO.

In January 2020, Imperva named Pam Murphy Chief Executive Officer.[16]

Service and features[edit]

Imperva’s full-stack solution contains products for both application and data security. It offers multi-layered protection to ensure a company’s websites and applications are always available and secure, whether they’re located on-premise, in the cloud, or in a hybrid environment.

Imperva offers eight application security solutions:

  • Web Application Firewall (WAF)[17] - Deployed on-premises, in AWS or Azure, or as a cloud service itself, Imperva WAF analyzes and inspects requests coming in to a company’s applications, allowing legitimate traffic through and keeping bad traffic out.
  • DDoS Protection[18] - Available for websites, networks, domain name servers (DNS), and IPs, Imperva DDoS Protection immediately mitigates the largest DDoS attacks without incurring latency or interfering with legitimate users.
  • Runtime Application Self-Protection (RASP)[19] - RASP sits within applications to protect against known and zero-day vulnerabilities. Using patented LangSec techniques[20], which treat data as code, RASP has full context of potentially malicious payloads before the application completes its processes.
  • API Security[21] - Protects websites and APIs with an intuitive single stack approach to detecting and blocking exploits. Enforces positive security models automatically, integrating seamlessly with leading API Gateway vendors.
  • Bot Management[22] - Collects and analyzes bot traffic to pinpoint anomalies, protecting an organization’s websites, mobile applications and APIs from automated threats without affecting the flow of business-critical traffic. Further protection is provided by rate limits based on device fingerprints, rather than IPs.
  • Account Takeover (ATO) Protection[23] - Utilizes a multi-layered, intent-based detection process to identify and defend against cybercriminals’ attempts to take over users’ accounts for malicious purposes.
  • Attack Analytics[24] - The cloud-based solution employs artificial intelligence and machine learning to correlate and distill thousands of security events into a few readable security narratives.
  • Application Delivery[25] - Helps websites and applications run faster with content caching, load balancing, and failover delivered via a security-enabled content delivery network (CDN). Imperva also offers five data security solutions:

Imperva also offers five data security solutions:

  • Data Risk Analytics[27] - Uses machine learning and data risk analytics to identify suspicious data access and prioritize threats.
  • Data Masking[28] - Protects sensitive data from exposure in non-production or DevOps environments. Uses deterministic and random approaches to ensure consistency while platform-specific optimizations and an open architecture enable platform-agnostic and scalable masking.
  • Discovery and Assessment[29] - Automates database discovery and classification to discover unknown databases, classify sensitive data, and detect database vulnerabilities.
  • File Security[30] - Protects sensitive files from cybercriminals and malicious insiders by continuously monitoring all user access to enterprise file storage systems and keeping a detailed record of all file access activity, including privileged users.

In addition, Imperva provides cybersecurity solutions that meet the unique security and compliance needs of different industries and regulations:

Awards and recognitions[edit]

In 2011, Imperva won Info Security’s Global Product Excellence Award[31]. The same year, it won SC Magazine Australia’s Product or Service of the Year Award[32].

In 2013, Imperva’s SecureSphere won SC Magazine Australia’s Gatekeeper Award[33]. In the same year, it received the Frost & Sullivan Southeast Asia Web Application Market Share Leadership Award for the second consecutive year[34].

In 2014, Imperva was recognized as the Web Application Firewall Vendor of the Year at the Frost & Sullivan Asia Pacific ICT Awards[35].

In 2015, Cyber Defense Magazine awarded Imperva Most Innovative Cloud Security Solution, and Most Innovative Data Center Security Solution[36].

In 2016, Imperva won ICSA Labs’ Excellence in Information Security Testing Award, recognizing the company for its successful completion of 10 years of continuous ICSA Labs information security testing[37].

In 2017, Imperva’s WAF solutions won the Trust Award for best Web Application Solutions at the SC Awards[38]. The same year, Imperva was featured in CRN’s Security 100 list, as one of the coolest Identity Management and Data Protection Vendors[39].

In 2018, Imperva WAF was recognized by customers in Gartner’s peer insight Customer Choice as one of the best WAFs of the year[40]. For the second consecutive year, Imperva’s PartnerSphere Channel Program was featured in CRN’s Cloud Partner Program Guide[41] and designated a 5-Star Security Vendor[42].

In 2019, Imperva was recognized by Frost & Sullivan as the Asia-Pacific WAF Vendor of the Year[43]. The same year, the company was recognized for the sixth consecutive year as a leader in the Gartner Magic Quadrant for WAFs. CRN recognized Imperva’s Jim Ritchings and Kirt Jorgenson as “Channel Chiefs” (Jorgenson for the third consecutive year)[44]. Imperva FlexProtect for Database won Best Database Security in the 2019 SC Awards[45].


  1. ^ "Check Point founder returns to source to fund new venture". Retrieved 4 October 2016.
  2. ^ McIntosh, John (September 10, 2003). "WebCohort secures the 'Enterprise Application Sphere'". TechTarget. Retrieved 4 October 2016.
  3. ^ Villano, Matt (February 12, 2004). "WebCohort Changes Name to Imperva". CRN. Retrieved 4 October 2016.
  4. ^ "Imperva IPO goes high at $90M". Silicon Valley Business Journal. Archived from the original on February 9, 2014. Retrieved 4 October 2016.
  5. ^ Lennon, Mike. "Imperva Makes Three Acquisitions, Unveils New Cloud Strategy". SecurityWeek.Com. Archived from the original on August 14, 2017. Retrieved 4 October 2016.
  6. ^ "Imperva Appoints Anthony J. Bettencourt As New President and CEO". Imperva. Retrieved 18 August 2014.
  7. ^ Dale, Brady (November 29, 2016). "Three Whitehat Countermeasures to the Botnet Threat". The New York Observer.
  8. ^ Anderson, Will (9 February 2017). "Austin cybersecurity software maker opens wallet for $40M buyout". Austin Business Journal.
  9. ^ Jones, Donovan (9 February 2017). "Imperva Acquires Camouflage Software For Data Masking System". Seeking Alpha.
  10. ^ "BRIEF-Imperva names Christopher Hylen as president and CEO". Reuters. 10 August 2017.
  11. ^ "Elliott Associates 'Restarted' Information Security Company Imperva". Calcalist. 27 February 2018.
  12. ^ "Imperva Completes the Acquisition of Prevoty". MarketWatch. Retrieved 2018-09-12.
  13. ^ Plummer, Libby (2018-08-16). "Google Chrome bug discovered that could let hackers access your private data". mirror. Retrieved 2018-08-31.
  14. ^ "Thoma Bravo Announces the Acquisition of Imperva". Toolbox. January 11, 2019.
  15. ^ "Cybersecurity Firm Imperva Discloses Breach". KrebsOnSecurity. Retrieved 2019-08-20.
  16. ^ "Imperva Names Pam Murphy as CEO". Imperva. Imperva. Retrieved 6 January 2020.
  17. ^ "Web Application Firewall (WAF)". imperva. Imperva. Retrieved 25 February 2019.
  18. ^ "DDoS Protection". imperva. Imperva. Retrieved 25 February 2020.
  19. ^ "Runtime Application Self-Protection (RASP)". imperva. Imperva. Retrieved 25 February 2020.
  20. ^ "LANGSEC: Language-theoretic Security "The View from the Tower of Babel"". LangSec. Retrieved 25 February 2020. External link in |website= (help)
  21. ^ "API Security". imperva. Imperva. Retrieved 25 February 2020.
  22. ^ "Bot Management". imperva. Imperva. Retrieved 25 February 2020.
  23. ^ "Account Takeover (ATO) Protection". imperva. Imperva. Retrieved 25 February 2020.
  24. ^ "Attack Analytics". imperva. Imperva. Retrieved 25 February 2020.
  25. ^ "Application Delivery". imperva. Imperva. Retrieved 25 February 2020.
  26. ^ "Data Activity Monitoring (DAM)". imperva. Imperva. Retrieved 25 February 2020.
  27. ^ "Data Risk Analytics". imperva. Imperva. Retrieved 25 February 2020.
  28. ^ "Data Masking". imperva. Imperva. Retrieved 25 February 2020.
  29. ^ "Discovery and Assessment". imperva. Imperva. Retrieved 25 February 2020.
  30. ^ "File Security". imperva. Imperva. Retrieved 25 February 2020.
  31. ^ "Imperva won Info Security's Global Product Excellence Award". imperva. Imperva. Retrieved 25 February 2020.
  32. ^ "Imperva wins SC Magazine Australia's 2011 Product or Service of the Year Award". SC Magazine. SC Magazine. 1 May 2011. Retrieved 25 February 2020.
  33. ^ "2013 SC Award winners". IT News. IT News. 24 May 2013. Retrieved 25 February 2020.
  34. ^ "2013 Frost & Sullivan Southeast Asia Web Application Firewall Market Share Leadership Award" (PDF). Imperva. Frost & Sullivan. 1 October 2013. Retrieved 25 February 2020.
  35. ^ "Imperva Named Web Application Firewall Vendor of the Year at 2014 Frost & Sullivan Asia Pacific ICT Awards". Marketwatch. Marketwatch. 2 July 2014. Retrieved 25 February 2020.
  36. ^ "Cyber Defense Awards 2015". Cyber Defense Magazine. Cyber Defense Magazine. 1 April 2015. Retrieved 25 February 2020.
  37. ^ "Announcing the 2016 Excellence in Information Security Testing Award Winners". ICSA Labs. ICSA Labs. 29 February 2016. Retrieved 25 February 2020.
  38. ^ "2017 SC Awards Honored in the United States". SC Media. SC Media. 15 February 2017. Retrieved 25 February 2020.
  39. ^ "2017 Security 100: 15 Coolest Identity Management And Data Protection Vendors". CRN. CRN. 8 March 2017. Retrieved 25 February 2020.
  40. ^ "Best Web Application Firewalls Software of 2018 as Reviewed by Customers". Gartner. Gartner peerinsights. December 2018. Retrieved 25 February 2020.
  41. ^ "2018 Cloud Partner Program Guide". CRN. CRN. 17 September 2018. Retrieved 25 February 2020.
  42. ^ "2018 Partner Program Guide: 5-Star Security Vendors". CRN. CRN. 4 April 2018. Retrieved 25 February 2020.
  43. ^ "Frost & Sullivan's Asia-Pacific Best Practices Awards Honors the Top Companies in the Region". Frost & Sullivan. Frost & Sullivan. 30 August 2019. Retrieved 25 February 2020.
  44. ^ "2019 Channel Chiefs". CRN. CRN. 2 April 2019. Retrieved 25 February 2020.
  45. ^ "The winners of the 2019 SC Awards Honored in the U.S." SC Media. SC Media. 6 March 2019. Retrieved 25 February 2020.

External links[edit]