Results for: owasp
View:
Suggested Categories:
IT Security Software
IT security software is designed to protect information technology (IT) systems, networks, and data from cyber threats, such as malware, hacking, and unauthorized access. These tools provide various features such as antivirus protection, firewalls, encryption, intrusion detection and prevention systems, and vulnerability management to ensure the integrity, confidentiality, and availability of sensitive information. IT security software helps organizations detect, prevent, and respond to security incidents, mitigate risks, and ensure compliance with industry regulations. It is critical for businesses and individuals to safeguard against cyberattacks, data breaches, and other security vulnerabilities.
-
1
Modshield SB
StrongBox IT
Modshield SB Web Application Firewall (WAF) – Powered by Modsecurity and OWASP CRS, is tailor-made to fit all your application security needs. Modshield SB is packed with security features that enable a 360-degree protection for your applications and hosting infrastructure. Powered by the OWASP Core Ruleset, Modshield SB provides optimal coverage against OWASP Top 10 threat vectors, automation protection and protection against credential stuffing attacks.Starting Price: $0.58 per hour -
2
WebOrion Protector
cloudsineAI
WebOrion Protector is an enterprise-grade web application firewall (WAF) designed to deliver unmatched protection using the OWASP Core Rule Set (CRS). Built on the advice of the global OWASP community's leading experts in web application security, it leverages an intelligent anomaly-scoring, heuristics, and signature-based engine to defend against threats and exploits covered by the OWASP top 10 web application security risks. Rapidly respond to zero-day threats with seamless virtual patching and a powerful user interface built to streamline monitoring, analytics, and fine-tuning, with both entry-level and advanced users in mind. ... -
3
Astra Pentest
Astra Security
Astra’s Pentest is a comprehensive penetration testing solution with an intelligent automated vulnerability scanner coupled with in-depth manual pentesting. On top of 10000+ tests including security checks for all CVEs mentioned in the OWASP top 10, and SANS 25, the automated scanner also conducts all tests required to comply with ISO 27001, HIPAA, SOC2, and GDPR. Astra offers an interactive pentest dashboard that the user can use to visualize vulnerability analyses, assign vulnerabilities to team members, and collaborate with security experts. And if the users don’t want to get back to the dashboard every time they want to use the scanner or assign a vulnerability to a team member, they can simply use the integrations with CI/CD platforms, Slack, and Jira.Starting Price: $199 per month -
4
mTraction Survey Platform
mTraction Enterprise
...It offers a wide range of features like Fraud Detection, Question Branching, Multilingual Capabilities, Incentives & Rewards, Real-time Data Insights, Mobile-First Survey Design, and Enhanced Data Security covering PII, IM8, and OWASP compliances. Google Data Studio is used in the backend of the mTraction Survey Platform for in-depth analysis. mTraction Enterprise emphasizes Industry 4.0 Solutions. -
5
open-appsec
open-appsec
automatic web application & API security using machine learning open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks. It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways. open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions. -
6
ThreatX
A10 Networks
...Where other security solutions rely on signatures, static rules and single attacks, ThreatX builds a dynamic profile of every threat actor as they move through the threat lifecycle. ThreatX easily monitors bots and high-risk attackers to predict and prevent layer 7 application attacks, including the top OWASP and zero-day threats, and DDoS attacks. -
7
whiblo
braf.tech
...Regarding the security of the information stored and access to it, security and penetration tests have been performed by an independent auditor. The system has been designed in accordance with the OWASP standard. The application offers: - reporting threats in compliance to Directive (EU)2019/1937 and local regulations - anonymity - users profiles - additional fields in forms - possibility to add attachments on both sides - reportsStarting Price: €38/month -
8
Avatao
Avatao
Avatao’s security training goes beyond simple tutorials and videos offering an interactive job-relevant learning experience to developer teams, security champions, pentesters, security analysts and DevOps teams. With 750+ challenges and tutorials in 10+ languages, the platform covers a wide range of security topics across the entire security stack from OWASP Top 10 to DevSecOps and Cryptography. The platform immerses developers in high-profile cases and provides them with real, in-depth experience with challenging security breaches. Engineers will actually learn to hack and patch the bugs themselves. This way Avatao equips software engineering teams with a security mindset that increases their capability to reduce risks and react to known vulnerabilities faster. ... -
9
Resurface
Resurface Labs
...Purpose-built for API data, Resurface captures complete request and response payloads (including GraphQL) to instantly see threats and failures. Get alerts on data breaches for zero-day detection and response. Mapped to OWASP Top10, Resurface alerts on threats with complete data security patterns and behaviors. Resurface is self-hosted, all data is first-party, installed with a single Helm command. Resurface is the only API security solution engineered for deep inspection at scale. Handling millions of API calls, Resurface detects and alerts on active attacks. ...Starting Price: $9K/node/year -
10
InfiSecure
InfiSecure Technologies
...Integrate in 20 minutes with our customized API integration kits. 24x7 automated threat protection against bad and nonhuman traffic. InfiSecure specializes in protecting Web & API from OWASP Top Automated Threats such as Web Scraping, Content Theft, Account Takeover, etc. Our Anti-Bot solution empowers your IT, Legal and Marketing departments to efficiently manage and protect your domain names, trademarks, products, and online brand identity by allowing you to detect and mitigate against all malicious automated traffic in real-time. ...Starting Price: $15 per month -
11
Wallarm API Security Platform
Wallarm
Built by security practitioners for practitioners, Wallarm's API security platform provides robust protection for APIs, web apps, microservices, and serverless workloads in cloud-native, multi-cloud, Kubernetes, and on-premises environments. It delivers coverage against OWASP API Top-10 risks and advanced threats, ensuring visibility and rapid vulnerability remediation. The Wallarm platform is a best-in-class API security solution that supports multiple deployment options. Trusted by security teams globally, Wallarm's API security platform is the fastest, easiest, and most effective way to stop API attacks. ... -
12
NSFOCUS WAF
NSFOCUS
...Our solution harnesses the power of semantic analysis, intelligent analytics, threat intelligence, and smart patching to identify and neutralize a vast range of web attacks, including all OWASP top 10 attacks, DDoS attacks, etc. -
13
Escape
Escape
...Get key data about your APIs, including endpoint URLs, methods, response codes, and metadata, and identify potential security risks, sensitive data exposure, and attack paths. Achieve thorough security coverage with 104+ security tests, including OWASP, business logic, and access control. Integrate Escape seamlessly into your CI/CD systems like Github Actions or Gitlab CI for automated scanning. -
14
Tenable Web App Scanning
Tenable
Unified web app and API scanning that’s simple, scalable, and automated. Whether it’s the top 10 risks from OWASP, vulnerable web app components, or APIs, Tenable Web App Scanning gives you comprehensive dynamic application security testing (DAST). Web application security from the largest vulnerability research team in the industry. Deliver immediate value with fast web application scans to discover common security hygiene issues that run in two minutes or less. -
15
BugDazz
SecureLayer7
...BugDazz assists in achieving compliance by accelerating the generation of reports for standards such as PCI DSS and HIPAA. It integrates seamlessly with existing CI/CD pipelines, facilitating the acceleration of product rollouts. The scanner goes beyond standard OWASP Top 10 vulnerabilities, providing comprehensive protection against critical API security risks.Starting Price: $3,999 per year -
16
CyberEDU
CyberEDU
CyberEDU is a next‑generation, cyber‑range‑as‑a‑service platform that bridges the gap between theory and practice by delivering hundreds of self‑paced, browser‑accessible hands‑on exercises and challenges mapped to industry standards such as MITRE ATT&CK, OWASP, and CWE. Learners, whether individuals, corporate teams, or university students, can build practical offensive and defensive skills through immersive labs without any special setup or hidden limitations. CyberEDU’s structured learning journeys guide users from basic exercises to advanced scenarios, offering flexible training paths, continuous skills tracking via a dynamic resume, and gamified rewards, rankings, and competitions to benchmark progress against peers. ... -
17
Barracuda Web Application Firewall
Barracuda
...Barracuda Web Application Firewall is a part of Barracuda Cloud Application Protection, an integrated platform that brings a comprehensive set of interoperable solutions and capabilities together to ensure complete application security. Barracuda Web Application Firewall protects applications, APIs, and mobile app backends against a variety of attacks including the OWASP Top 10, zero-day threats, data leakage, and application-layer denial of service (DoS) attacks. By combining signature-based policies and positive security with robust anomaly-detection capabilities, Barracuda Web Application Firewall can defeat today’s most sophisticated attacks targeting your web applications. Barracuda Active DDoS Prevention, an add-on service for the Barracuda Web Application Firewall, filters out volumetric DDoS attacks before they ever reach your network and harm your apps. -
18
Crashtest Security
Crashtest Security
...Our state-of-the-art dynamic application security testing (DAST) solution integrates seamlessly with your dev environment and protects multi-page and JavaScript apps, as well as microservices and APIs. Set up Crashtest Security Suite in minutes, get advanced crawling options, and automate your security. Whether you want to see vulnerabilities within the OWASP Top 10 or you want to go for deep scans, Crashtest Security is here to help you stay on top of your security and protect your code and customers.Starting Price: €35 per month -
19
...Adopt an edge security strategy with a web application firewall that aggregates threat intelligence from multiple sources including WebRoot BrightCloud® and more than 250 predefined OWASP, application, and compliance-specific rules. Protect applications deployed in Oracle Cloud Infrastructure, on-premises, and in multicloud environments with access controls based on geolocation data, whitelisted and blacklisted IP addresses, HTTP URL, and HTTP header. Identify and block malicious bot traffic with an advanced set of verification methods, including JavaScript, CAPTCHA, device fingerprinting, and human interaction algorithms.
-
20
Imperva WAF
Imperva
...Imperva WAF is a key component of a comprehensive Web Application and API Protection (WAAP) stack that secures from edge to database, so the traffic you receive is only the traffic you want. We provide the best website protection in the industry – PCI-compliant, automated security that integrates analytics to go beyond OWASP Top 10 coverage, and reduces the risks created by third-party code. -
21
Imperva API Security
Imperva
...Imperva’s API Security enables your teams to stay ahead of DevOps via automation. Imperva API Security empowers your approach with out-of-the-box security rules adjusted to your APIs. This ensures complete OWASP API coverage and promotes visibility for all security events per API endpoint. With API Security, simply upload the OpenAPI specification file that your DevOps team has created and Imperva will automatically build a positive security model. -
22
CloudGuard AppSec
Check Point Software Technologies
...CloudGuard uses contextual AI to prevent threats with absolute precision, without any human intervention as the application is updated. Protect web applications, and prevent OWASP Top 10 attacks. From implementation through runtime, CloudGuard AppSec automatically analyzes every user, transaction, and URL to create a risk score to stop attacks without creating false positives. In fact, 100% of CloudGuard customers maintain fewer than 5 rule exceptions per deployment. -
23
Probely
Probely
...Probely empowers developers to be more independent, solving the security teams' scaling problem, that is usually undersized when compared to development teams, by providing developers with a tool that makes them more independent when it comes to security testing, allowing security teams to focus on more important and critical activities. Probely covers OWASP TOP10 and thousands more and can be used to check specific PCI-DSS, ISO27001, HIPAA, and GDPR requirements.Starting Price: $49.00/month -
24
Qwiet AI
Qwiet AI
The Fastest Code Analysis, Hands Down. 40X faster scan times so developers never have to wait for results after submitting pull requests. The Most Accurate Results. Qwiet AI has the highest OWASP Benchmark score, which is nearly triple the commercial average and more than double the 2nd highest score. Developer-Centric Security Workflows. 96% of developers report that disconnected security and development workflows inhibit their productivity. Implementing developer-centric AppSec workflows decreases mean-time-to-remediation (MTTR), typically by 5X - enhancing both security and developer productivity. ...Starting Price: Free -
25
InvestGlass
InvestGlass
Focus on your customer, grow your business. Stay ahead of your customers with a single, agile Swiss cloud platform. As InvestGlass is originally built for the banking domain, TLS and OWASP security recommendations and practices are carefully monitored. An open API is a publicly available application programming interface that provides developers with programmatic access to InvestGlass. We are cloud-native and we have a universal deployment model. InvestGlass is not locked to any specific cloud provider. InvestGlass is built with agile principles. ...Starting Price: $52.46 per month -
26
EthicalCheck
EthicalCheck
...Request input requires a public-facing OpenAPI Spec URL, an API authentication token valid for at least 10 mins, an active license key, and an email. EthicalCheck engine automatically creates and runs custom security tests for your APIs covering OWASP API Top 10 list Automatically removes false positives from the results, creates a custom developer-friendly report, and emails it to you. According to Gartner, APIs are the most-frequent attack vector. Hackers/bots have exploited API vulnerabilities resulting in major breaches across thousands of organizations. Only see real vulnerabilities; false positives are automatically separated. ...Starting Price: $99 one-time payment -
27
Truss
Truss
...It integrates with tax prep tools like Axcess, Ultratax, Drake, ProSystemFX, ProConnect, ProSeries, Lacerte, and ATX. Security is a strong focus; Truss is SOC 2 certified, uses AES-256 and Bcrypt encryption, follows OWASP-style standards, and ensures client data is never used to train large language models. -
28
Airlock
Airlock
...So you can concentrate all your IT resources on your business processes. The Airlock Secure Access Hub helps to meet all international compliance standards - from GDPR over PSD2, PCI-DSS, OWASP to MAS. The upstream enforcement point for access policies onto applications and services allows compliance with regulations without having to make adjustments in each individual application. -
29
CodeAnt AI
CodeAnt AI
Summarize pull request changes concisely to help the team quickly understand their impact. Detect and auto-fix code quality issues and anti-patterns for 30+ languages. Scan every code change for OWASP, CWE, SANS, and NIST vulnerabilities, and fix them. Scan every PR against over 10,000 policies to detect infrastructure as code issues and understand their impact. Identifies and protects sensitive information in your codebase, including API keys, tokens, and other secrets. Identify potential issues in code logic, and data structures, and understand their impact. ...Starting Price: $19 per month -
30
AppSecure Security
AppSecure Security
...Evaluate the efficacy of your security team’s readiness posture, detection, and response measures to tenacious hacker attacks on your network’s susceptible pathways. Identify and redress the key security lapses with our balanced approach that tests your APIs in accordance with the OWASP paradigm, along with tailored test cases for preventing any recurrences. Pentest as a service offers continuous, expert-led security testing to identify and remediate vulnerabilities, enhancing your website’s defenses against evolving cyber threats and making it secure, compliant, and reliable.