Web Application and API Security

Deploying web application and API protection can be difficult in mixed environments. Prisma Cloud simplifies deployments with agent-based and agentless deployment options for all cloud-native applications, delivering full, customizable support for the OWASP Top 10.

• Secure web applications from top security risks:

  Cover SQL injection, cross-site scripting, code injection and more.

• Identify applications and APIs in any compute format:

  Automatically discover web-facing services and API risks to determine protection.

• Enforce application security on microservices locally:

  Automatically enforce WAAS at the service level to keep up with auto-scaling, ephemeral environments.

• Leverage full, customizable protection:

  Select which enforcement mechanism – alert, prevent or ban – to apply for each security scenario.

• Deploy agents as a part of your DevOps workflow:

  Use code-based deployment mechanisms to enable automatic deployment of protection with every code push.

• Take a unified approach to cloud-native security:

  Use a single, unified cloud security solution for superior protection compared to point products.

The internet is full of bots, but not all bots are malicious. Gain visibility into bot activity to allow known-good bots, such as search engine crawlers, to go through while other malicious bots are blocked.

• Allow and monitor known bots:

  Allow good bots such as search engine crawlers and news bots to crawl your applications, but monitor and block abusive behavior.

• Control unknown bots:

  Alert or block requests originating from bots with unknown intent, including headless browsers, command-line tools and good bot impersonators.

• Define custom bots:

  Create bot definitions for bots your team decides are known-good or malicious.

• Configurable for each application:

  Set application- or individual-service-level configurations for bot protection rules.

Protecting your application from unwanted access is a top priority for application security teams. WAAS allows for control over how applications and end users communicate with the protected web application.

• Control inbound access to the application:

  Network controls allow administrators to deny inbound access to the application as well as allowed IPs.

• Block request based on headers:

  WAAS lets you block or allow requests that contain specific strings in HTTP headers.

• Protect against malicious files:

  Protect your applications against malware dropping by restricting uploads to just the files that match any allowed content types.