Blogs

Action Required: Increase Azure VM Quotas Before 31 July 2026

posted 15 days ago
Action Required: Increase Azure VM Quotas Before 31 July 2026 By Idan Cohen, Team Leader & Greg Zaoui, Technical Product Manager, WAF GW . Action Required: Increase Azure VM Quotas Before 31 July 2026 We would like to bring the following update to the attention of users of our On-premise cloud service. Microsoft Azure will introduce capacity growth restrictions for certain ...

Recommendations for Defending Bad Bots in the Agentic Age Webinar Recording

posted 21 days ago
Hi Community, Check out this recent Recommendations for Defending Bad Bots in the Agentic Age webinar recording below. This insightful webinar explores the growing threat of AI-driven bot attacks and how organizations can automatically identify and mitigate malicious bot traffic to keep applications and APIs secure. As automated traffic now accounts for more than half of all web activity, businesses ...

Why AI Needs a New Kind of Security

posted 07-07-2026
By Michael Wright and Tal Ovadia | Imperva There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of an AI assistant trained on the company's own documents. The product team is already planning a customer-facing version. The board has signed off on the budget. And somewhere in the middle of the meeting, a quiet question lands: ...

The 2026 Bad Bot Report is Here!

posted 05-05-2026
Hi Community, It is with great pleasure to announce that the 2026 Bad Bot Report is now available. This marks our 13th consecutive edition, highlighting how automation is reshaping the internet. The statistics uncovered this year are compelling and urgent: AI-driven bot attacks surged 12.5x, signalling a dramatic acceleration in automated threats. Bots now dominate the internet, accounting ...

Closing Coverage Gaps and Removing Security Bottlenecks in Modern Dev Environments

posted 04-01-2026
The Friday Afternoon Wall: Why "Process" is Killing Your Security Daniel Sedaka Technical Product Manager It’s 4:00 PM on a Friday. You’ve got the fix. It’s tested, it’s solid, and it’s ready to go. All you need is a quick subdomain for the new service, and you can head into the weekend with a clean slate. Then, reality hits. You open the service desk and realize you need a security ticket. ...

Important: New Denial-of-Service Vector in React Server Components

posted 02-18-2026
Recently, a new denial-of-service (DoS) attack vector targeting React Server Components was disclosed. This discovery highlights a potential risk where an attacker can exploit the way server components process user inputs, causing excessive resource consumption on the server. The result can be degraded performance or even complete service outages. While work is underway, Imperva customers are continuing ...

New Resource: Data Activity Monitoring (DAM) v15 Platform Changes and Planning Guidance

posted 02-03-2026
Hi everyone I'm Joan, the new Digital Community Manager, working alongside my colleagues Sarah Lamont and Seana Murray. I just wanted to share the following important document regarding ' Data Activity Monitoring (DAM) v15 Platform Changes and Planning Guidance' . This document is available for you to download here . Join us on 26th February for our webinar on 'Database Activity Monitoring ...

Customer Support Portal Update: Your New Single Sign-on Webinar Recording

posted 12-18-2025
Hi Community, I’m sharing this insightful webinar we held yesterday, led by Arik Ben-Zaken, Sarit Levy, and Rocio Rodriguez, which provided an update on the customer support portal SSO. The session ensured all community members were fully informed about the recent changes to accessing the Imperva Support Portal and Community. This transition reflects Imperva’s ongoing commitment to enhancing the ...

Too Many Emails? Here’s an Easy Way to Manage Your Product Notifications

posted 11-20-2025
Hi Community, We’re excited to announce that in January 2026 , on-premise product notifications for DSF and WAF Gateway are being updated to be part of the Thales Support Portal . This update gives you easy access to all of your product updates and information in one place: · Customize your product emails : Do you want updates daily on your favorite ...

Community's Birthday Webinars - All in One Place

posted 11-11-2025
Hi Community, Catch up on our community's birthday webinars here. This blog post is a central hub for all the recent sessions, perfect for revisiting a favourite or checking out one you missed! Cloud WAF Office Hours: Getting Started . Data Security Fabric: Health Check - Ensuring DSF Delivers, Quarter After Quarter . ...

Cloud WAF Workshop: Website Onboarding and TLS Implementation Demo Webinar Recording

posted 10-28-2025
Hi Community, Just want to share this insightful webinar with you all. The Cloud WAF Workshop provided a hands-on learning experience focused on the essential steps of onboarding a website to the Imperva Cloud Web Application Firewall (WAF) and implementing Transport Layer Security (TLS) for optimal protection. In this interactive session, Chaithra Ravichander guided participants through a step-by-step ...

The API Battleground: Why APIs are the new frontline—and how to stop the stealthiest attacks

posted 10-20-2025
Hi Community, I hope you all enjoyed the API Security session last week, or have had a chance to view the recording here: Know Your Grey-Matter API: Best Practices to Secure Unmanaged APIs Webinar Recording . API Security is a major focus in the current threat landscape which is why produced Imperva’s API Threat Report. Check out my recent blog for the highlights, key takeaways and ...

Know Your Grey-Matter API: Best Practices to Secure Unmanaged APIs Webinar Recording

posted 10-17-2025
HI Community, In this insightful session, Levin Cheng and Luke Barbarinde delve into the critical aspects of API security, shedding light on the growing challenges organizations face in managing both known and unknown APIs. Through real-world examples and expert analysis, they explore what truly defines an API and why that matters in the context of security. This webinar will help you will ...

In The Know: Cloud WAF Podcast

posted 10-02-2025
Hi Community, Check out my latest podcast where I welcome Like Babarinde, Global Solutions Architect and Ziv Rika, Principle Product Manager for Cloud WAF. The discussion focuses on Cloud WAF features that protect against sensitive information leakage, cross site scripting, file upload scanning, and post quantum cryptography. Protecting sensitive data and ensuring compliance with ...

Your Cloud WAF is Watching the Door, but Who is Protecting the Gate? Network-Layer DDoS Protection Webinar Recording

posted 10-01-2025
Hi Community, I’m excited to share this engaging webinar, where Ofir Shaham and Alex Bakshtein discussed the growing threat of large-scale Distributed Denial of Service (DDoS) attacks and the importance of protecting your network infrastructure. This session emphasized why even existing Imperva Cloud WAF customers need to consider additional layers of defense to safeguard their digital assets. ...

Cloud Application Security Release Notes September 28, 2025

posted 09-29-2025
Hi Community, Take a look at the latest release notes below, and feel free to share any questions or feedback in the comments! These release notes provide information on changes and enhancements in each release. Unless otherwise specified, the changes described here are rolled out throughout the week and may not be immediately available in all accounts. You can also view the customer-facing release ...

Cloud Application Security Release Notes September 21, 2025

posted 09-22-2025
Hi Community, Check out latest release notes below and feel free to ask any questions or make any comments in the comment section below! These release notes provide information on changes and enhancements in each release. Unless otherwise specified, the changes described here are rolled out throughout the week and may not be immediately available in all accounts. You can also view the customer-facing ...

In The Know Podcast - Episode 4 Cloud WAF

posted 07-09-2025
In this episode, Michael Wright and Ziv Rika discuss the evolving landscape of SSL management, focusing on the recent changes in certificate validity periods and the importance of automation in managing SSL certificates. They explore the challenges organizations face in maintaining SSL coverage, the role of certificate authorities, and the implications of quantum computing on cryptographic security. ...

In The Know Podcast - Episode 3 WAF Gateway

posted 07-09-2025
In this episode, we explore the WAF Gateway, a long-standing security product that offers unique capabilities in application security. Eyal Cohen, the senior product manager, discusses its features, benefits for end users, integration with other security solutions, and the importance of on-prem deployment in a cloud-first world. The conversation also highlights the target audience for WAF Gateway and ...

**Important Update for Sectigo Custom Certificate Users**

posted 06-06-2025
Hi Community , I want to draw your attention to the recent release note regarding the Sectigo root certificate update . Please review this prior to renewing any certificates to ensure backward compatibility : https://docs.imperva.com/bundle/cloud-application-security/page/release-notes/2025-06-01.htm#SectigoCArootcertificatereplacement . ...