Web Application and API Security

Deploying application and API protection can be difficult in mixed environments. Prisma Cloud simplifies deployments with a single integrated agent for all cloud workload protection, delivering full, customizable support for the OWASP Top 10.

• Secure web applications from top security risks

  Cover SQL injection, cross-site scripting, code injection and more.

• Identify applications and APIs in any compute format

  Automatically discover web-facing services and APIs for protection.

• Enforce application security on microservices locally

  Automatically enforce WAAS at the service level to keep up with auto-scaling, ephemeral environments.

• Leverage full, customizable protection

  Select which enforcement mechanism – alert, prevent or ban – to apply for each security scenario.

• Deploy agents as a part of your DevOps workflow

  Use code-based deployment mechanisms to enable automatic deployment of protection with every code push.

• Take a unified approach to cloud native security

  Use a single, unified cloud security solution for superior protection compared to point products.

The internet is full of bots, but not all bots are malicious. Gain visibility into bot activity to allow known good bots, such as search engine crawlers, to go through while other malicious bots are blocked.

• Allow and monitor known bots

  Allow good bots, such as search engine crawlers and news bots, to crawl your applications, but monitor and block abusive behavior.

• Control unknown bots

  Alert or block requests originating from bots with unknown intent, including headless browsers, command line tools and good bot impersonators.

• Define custom bots

  Create bot definitions for bots your team decides are known-good or malicious.

• Configurable for each application

  Set application- or individual service-level configurations for bot protection rules.

Attacks on applications include forcing it to shut down or increasing latency, impacting end customers. Prisma Cloud enforces rate limits and protects against both high volume and steady DoS attacks.

• Prevent volumetric attacks from crashing applications

  Alert on or ban requests that exceed defined thresholds for burst rates and average rates.

• Protect against targeted DoS attacks

  Prevent vulnerability targeting attacks hidden in HTTP methods, file extensions and response codes.

• Control penalty box settings

  Ban frequent abusers based on IP address or session ID for a configurable time period to prevent overly broad bans.