Imperva alone scores 100% in August 2026 Cloud WAAP test
First merged summary.
SecureIQLab’s August 2026 Cloud WAAP test of 12 platforms gave only Imperva a perfect security and false-positive score.
A CSO Online buyer’s guide says a Web Application and API Protection platform combines WAF, API security, bot management, DDoS, and client-side script protection. SecureIQLab’s Cloud WAAP v5.0 validation, published in August 2026, tested 12 enterprise platforms with 1,608 attack scenarios and 1,487 legitimate-traffic scenarios. Complete Security Scores ranged from 100% to roughly 61%. Imperva, part of Thales, was the only vendor with a 100% Complete Security Score and a 100% false-positive avoidance score, its fifth consecutive Leader placement, plus a Secure by Default rating. API coverage varied by protocol, with WebSockets the weakest area; the guide recommends a two-week proof of value on real traffic. Forrester named Imperva a Leader in its Q1 2025 WAF Wave.
- SecureIQLab tested 12 enterprise Cloud WAAP platforms in v5.0.
- The lab used 1,608 attacks and 1,487 legitimate-traffic scenarios.
- Complete Security Scores ranged from 100% to about 61%.
- Only Imperva scored 100% on security and false-positive avoidance.
- WebSockets were the weakest API-protocol coverage area.
What each outlet adds
beyond the shared facts- CSO OnlineReports the August 2026 scores, Imperva’s perfect result, and Forrester’s Q1 2025 placement.
- Organizations
- SecureIQLabForresterAMTSO
Coverage
oldest first · one row per article · UTC- · 4d ago
GBHackersFirst report
2026 guide ranks ten database security and monitoring vendors
Imperva leads on inline query blocking; IBM Guardium and Trustwave DbProtect are each counted once.
- · 2h ago
CSO Online
Imperva scores 100% in SecureIQLab Cloud WAAP v5.0 test
The August 2026 AMTSO-certified test ran 12 platforms through 1,608 attacks; scores fell to about 61%.