Imperva scores 100% in SecureIQLab Cloud WAAP v5.0 test
Original title: Choosing a WAAP in 2026: 3 questions that separate the shortlist
The August 2026 AMTSO-certified test ran 12 platforms through 1,608 attacks; scores fell to about 61%.
A CSO Online buyer’s guide says a Web Application and API Protection platform consolidates WAF, API security, bot management, DDoS, and client-side script protection. SecureIQLab’s Cloud WAAP v5.0 validation, published in August 2026, tested 12 enterprise platforms. Imperva, part of Thales, was the only vendor with a 100% Complete Security Score and a 100% false-positive avoidance score, its fifth consecutive Leader placement, plus a Secure by Default rating. Forrester named Imperva a Leader in its Q1 2025 WAF Wave.
Unconfirmed: Scores come from the SecureIQLab test as cited in this Imperva-oriented buyer’s guide and are not independently verified here.
- The lab used 1,608 attack scenarios and 1,487 legitimate-traffic scenarios.
- Complete Security Scores ranged from 100% to roughly 61%.
- API coverage varied by protocol, with WebSockets the weakest area.
- The guide recommends a two-week proof of value on real traffic.
- Forrester named Imperva a Leader in WAF Solutions, Q1 2025.
- Products
- Imperva Cloud WAF
- Organizations
- SecureIQLabForresterAMTSO
From the original article
3 min read at csoonline.com
One platform or four Your WAF renewal is coming up. The API team has its own tooling in mind, the fraud team wants a bot product, and someone in networking owns DDoS. Four controls, four consoles, four sets of policies in front of the same applications.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.