From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Imperva Incapsula
Founded November 2009 (2009-11)
Founder Gur Shatz[1]
Marc Gaffan[2]
Headquarters Redwood Shores, CA, United States
Key people
Chris Hylen, CEO, Imperva[3]
Services Website Performance
Security as a Service[4]
Parent Imperva

Imperva Incapsula is a cloud-based application delivery platform. It uses a global content delivery network to provide web application security, DDoS mitigation, content caching, application delivery, load balancing and failover services.[2]


Incapsula was founded in 2009 by Gur Shatz and Marc Gaffan.[5] The company originally operated under the company Imperva (NYSE:IMPV), an American-based cyber security company who owned 85% of the company.[2] It was spun out from Imperva in 2009 and reported to be growing at a rate of 50% per quarter as of August 2013.[2] In February 2014 Imperva bought the remaining part of Incapsula and it became a product line within the parent company.

Incapsula was attributed with protecting against one of the Internet's largest attacks on a website as of October 2013. The attack was said to have lasted nine hours with 100Gbit/s of traffic at its peak.[6] The attack was against BTC China, a bitcoin and yuan trading platform.[7]

In December 2016 Incapsula revealed that it had again defended against the largest DDoS attack ever recorded, peaking at over 650Gbit/s and 200Mpps.[8]

Service and features[edit]

Incapsula has different features that are used in the security and performance of websites:

Incapsula WAF provides solutions to protect websites against SQL injections, cross site scripting, illegal resource access and all other OWASP top 10 threats, and web 2.0 threats including comment spam, referrer spam, fake registrations, site scraping, malicious bots, and academic web archiving. It works by changing a website's Domain Name System (DNS) record to route the website traffic through Incapsula.[9] Incapsula then filters out malicious attacks from bots and website scrapers.[9] Incapsula also has a content delivery network that caches websites on their server network to speed up website load time. The cached information is returned from a server closest to the end user in order to provide fast page loads. This also eliminates slow response from central servers due to heavy server traffic.[10]

Incapsula launched a tool named Backdoor Protect in 2013. The tool is reported to detect and block malicious backdoors and webshells. The tool works by comparing a website's traffic against a database of known backdoors.[11] Later that year, the company announced Login-Protect, a two factor authentication feature as an integrated addition to its products.[12] Incapsula also announced in 2013 that it would be implementing Layer 7 load balancing capabilities.[13]

Awards and recognition[edit]

In 2011 Incapsula was chosen as one of the Top 10 companies to participate in RSA Conference Innovation Sandbox.[14] The same year they were a finalist for the Red Herring Top 100 North America Award.[15] Incapsula was named #1 for Best Cloud Based Security CDN by WeRockYourWeb.[16]

The 2017 Forrester Wave for DDoS Service Providers, naming Imperva as the leader with top scores on both "Current Offering" and "Strategy" out of all evaluated DDoS service providers.[17]


  1. ^ Shatz, Gur (25 April 2012). "9 Things Businesses Need to Know About Web Security". Mashable. Retrieved 28 October 2013. 
  2. ^ a b c d Cohan, Peter (13 August 2013). "Incapsula's Growing 50% A Quarter By Blocking DDoS Attacks". Forbes. Retrieved 28 October 2013. 
  3. ^ "Management". Incapsula Website. Retrieved 21 May 2018. 
  4. ^ Schwartz, Matthew J. (9 January 2013). "US Bank Hack Attack Techniques Identified". Information Week. Retrieved 28 October 2013. 
  5. ^ Reilly, Allison Midori (20 October 2011). "Protect Your Website, and Boost Its Speed, With Incapsula". Small Biz Technology. Retrieved 28 October 2013. 
  6. ^ Kerner, Sean Michael (1 October 2013). "Latest 100 Gigabit Attack Is One of Internet's Largest". eWeek. Retrieved 28 October 2013. 
  7. ^ Leyden, John Leyden (17 October 2013). "How mystery DDoSers tried to take down Bitcoin exchange with 100Gbps crapflood". The Register UK. Retrieved 28 October 2013. 
  8. ^ "". Retrieved 2017-02-03.  External link in |title= (help)
  9. ^ a b Cohan, Peter (11 September 2001). "Incapsula's Cloud Shields, Accelerates Your System". Forbes. Retrieved 28 October 2013. 
  10. ^ "Website Acceleration Performance". Incapsula. Retrieved 28 October 2013. 
  11. ^ Kumar, Mohit (30 January 2013). "Incapsula Introduces Backdoor Protect". The Hacker News. Retrieved 28 October 2013. 
  12. ^ Selvan, Sabari (1 July 2013). "Incapsula Login Protection – Boost Your Website Security with Two Factor Authentication". Retrieved 1 November 2013. 
  13. ^ "Incapsula Brings Layer 7 Load Balancing Into the Cloud". Broadway World. 15 October 2013. Retrieved 1 November 2013. 
  14. ^ "2011 RSA Conference Innovation Sandbox". RSA Conference. January 2011. Retrieved 2011-12-19. 
  15. ^ Wedel, Xenia Von (8 May 2013). "Finalists Announce for the 2013 Red Herring Top 100 North America Award". Virtualization Journal. Retrieved 28 October 2013. 
  16. ^ "2013 Best Cloud Based Security Reviews and Comparison". We Rock Your Web. 
  17. ^ "The Forrester Wave Ranks Imperva as a Leader for DDoS Mitigation Providers". 

External links[edit]