Web Application and API Security

Deploying application and API protection can be difficult in mixed environments. Prisma Cloud simplifies deployments with a single integrated agent for all cloud workload protection, delivering full, customizable support for the OWASP Top 10.

• Secure web applications from top security risks

  Cover SQL injection, cross-site scripting, code injection and more.

• Identify applications and APIs in any compute format

  Automatically discover web-facing services and APIs for protection.

• Enforce application security on microservices locally

  Automatically enforce WAAS at the service level to keep up with auto-scaling, ephemeral environments.

• Leverage full, customizable protection

  Select which enforcement mechanism – alert, prevent or ban – to apply for each security scenario.

• Deploy agents as a part of your DevOps workflow

  Use code-based deployment mechanisms to enable automatic deployment of protection with every code push.

• Take a unified approach to cloud native security

  Use a single, unified cloud security solution for superior protection compared to point products.

The internet is full of bots, but not all bots are malicious. Gain visibility into bot activity to allow known good bots, such as search engine crawlers, to go through while other malicious bots are blocked.

• Allow and monitor known bots

  Allow good bots, such as search engine crawlers and news bots, to crawl your applications, but monitor and block abusive behavior.

• Control unknown bots

  Alert or block requests originating from bots with unknown intent, including headless browsers, command line tools and good bot impersonators.

• Define custom bots

  Create bot definitions for bots your team decides are known-good or malicious.

• Configurable for each application

  Set application- or individual service-level configurations for bot protection rules.

When vulnerabilities are discovered, exploit kits are often released before a patch is available. Protect against unpatched vulnerabilities at the service level.

• Reduce risk until official patches are released

  Use virtual patching to create a safeguard against exploits until the underlying service can be patched.

• Add custom WAAS rules for signatures from your team

  Take advantage of custom rules, a guided, auto-complete way to secure against exploits when your research teams identify vulnerabilities.

• Protect against zero-day exploits

  Automatically receive updated WAAS rules from Prisma Cloud Labs and choose whether to apply them.