Key pains and benefits
Security leaders of the retail industry, ranging from medium to large size companies, mention pretty similar pain points. Here is a breakdown of the most popular and how Wallarm addresses them in Fortune500 accounts.
I need to protect both legacy apps and modern APIs that we're moving from private cloud to public cloud providers
Our apps suffer from account takeovers and different kind of automated fraud with customer loyalty programs that evolve over time
My old WAF constantly requires tedious tuning and team resources. Still, I can’t really use it in a blocking mode.
Parts of my business need isolated consoles to manage WAF for their assets
I need to find a product that my DevOps / Infrastructure team would vet for usage in our cloud native environment and massive load
Wallarm has many cool features to help DevOps teams strike the delicate balance between the security of the application and the very short release cycles.
Chris Rodriguez,
Senior Analyst, Front & Sullivan
How Wallarm works
Unlike default cloud WAFs, Wallarm automates protection for apps and APIs with no manual tuning and investments into ongoing maintenance allowing the team to focus on different tasks. It scales. It works.
Watch our quick demo videos
Wallarm Protects Some of Leading Fortune500 Retail Companies
Day in life of Security and DevOps teams
Unlike default cloud WAFs, Wallarm automates protection for apps and APIs with no manual tuning and investments into ongoing maintenance, allowing the team to focus on different tasks. It scales. It works.
Register for the webinar to learn more about appsec challenges faced by Retail
415 Brannan St, San Francisco, CA 94107
(415)940-7077
request@wallarm.com
2020 © Wallarm Inc.
Victor Gartvich
VP of Security Solutions, Wallarm
Seasoned technology professional, in charge of Wallarm's product management. Most recently Victor was leading security and DevOps efforts at Lacework, another emerging Silicon Valley security company. Prior to that Victor spent four years leading product and engineering activities at an AppSec & performance startup, Nuubit.
Victor holds a Masters in Computer Science from Tashkent State Technical University.
Ian has spent the last ten years working at the market-leading vendors in the application delivery and vulnerability detection. Helping customers with the protection of their web applications and APIs using scanning tools and a variety of Web Application Firewalls
Ian Johnson
Security Solutions Architect at Wallarm
I need to stay in compliance with PCI regulations
Wallarm offers a single source of control for the security of websites, applications, and APIs, hosted across multiple cloud environments and Kubernetes clusters.
Unlike traditional WAFs, Wallarm doesn’t need manual tuning and investments into ongoing maintenance to minimize false positives. It just works.
Wallarm protects against credential stuffing, API abuse, coupon codes enumeration and other malicious activity that is typical for Ecommerce companies.
Give every team a level of visibility and control over the protection of their assets while keeping an option to manage the entire portfolio from a single dashboard.
DevOps teams like Wallarm as they can automate deployment, updates and monitoring with their existing tools such as Terraform or Ansible. It also meets the most strict requirements for added latency.
Wallarm strengthens security posture and keeps the traffic on premises while helping to meet PCI compliance. Wallarm is SOC2 Type II compliant.
Dashboard overview
Dissecting one attack
API Deep Request Inspection
Scanning the attack surface
Every Thursday morning, after an application update, Joanna starts by making sure that security rules are updated to match the updated APIs.
It's a common occurrence when an app update causes new false positives. Joanna receives complains from the support and DevOps teams regarding WAF blocking.It is an often situation when an app update cause new false positives. Joanna receives complains from the support and DevOps teams regarding WAF blocking.
Joanna's team temporarily turns off protection and manually verifies which rule triggered blocking of legitimate users.
- When the rules are updated, Joanna works with the DevOps manager to ensure an updated ACL will no longer disrupt application operation.
Day-in-the-life before our product
Day-in-the-life after Wallarm
Wallarm's WAF is installed instead of the AWS WAF to better protect applications and APIs.
Joanna's team no longer needs to update security rules as Wallarm doesn't require manual tuning.
Individual API calls with malicious requests are blocked without disrupting operation of the application for the rest of the IP address in the similar locale.
All attacks are automatically verified to see if there's any potential of exposed security issues.
