Imperva
Encyclopedia
Imperva is a data security
company headquartered in the United States, which provides solutions for high-value business data protection and prevents sensitive data theft from hackers
and malicious insiders by securing data across three main areas: database
s, file system
s, and web application
s.
Imperva claims more than 1,500 customers with thousands of organizations protected through cloud
-based deployments. Imperva's customers include leading enterprises, government organizations, and managed service providers who rely on Imperva’s data security solutions.
The company’s key innovation was the development of the data security and compliance solution, SecureSphere—an appliance that protects web applications from online attacks, secures business-critical databases and files, and mitigates vulnerabilities across all areas of data.
Imperva has received a total of $53.7M in venture capital
funding, including over $20M in its Series D round in April 2008.
Imperva’s investors include Accel Partners
, Greylock Partners, Meritech Capital Partners
, USVP and Venrock.
It was announced in June 2011, that Imperva filed for an initial public offering
; which means that it will issue common stock
or shares to the public for the first time. The company plans to raise $75 million in a November 2011 IPO
by offering 5 million shares at a price range of $14.00 to $16.00.
2010
2009
2008
2007
2006
2005
2004
2002
Imperva has published a detailed company mission overview.
firewalls, Database activity monitoring
, and File Activity Monitoring.
solutions secure sensitive data stored in databases against compromises of their confidentiality, integrity and availability by providing full visibility into data usage, vulnerabilities and access rights to security, audit and risk professionals. The company enables customers to optimize the deployment by combining remote assessment scans, agent-based monitoring and network activity monitoring.
’s Neil MacDonald is crucial to improving file data security.
draws on the principles of application security
but applies them specifically to Internet
and Web
systems. By continuously adapting to evolving threats and mitigating the risk of data breaches, Imperva’s Web application security
solutions protect web applications from cyber attacks predominantly through web application
firewalls.
2009
2008
2007
2006
2005
2004
Data security
Data security is the means of ensuring that data is kept safe from corruption and that access to it is suitably controlled. Thus data security helps to ensure privacy. It also helps in protecting personal data. Data security is part of the larger practice of Information security.- Disk Encryption...
company headquartered in the United States, which provides solutions for high-value business data protection and prevents sensitive data theft from hackers
Hacker (computer security)
In computer security and everyday language, a hacker is someone who breaks into computers and computer networks. Hackers may be motivated by a multitude of reasons, including profit, protest, or because of the challenge...
and malicious insiders by securing data across three main areas: database
Database
A database is an organized collection of data for one or more purposes, usually in digital form. The data are typically organized to model relevant aspects of reality , in a way that supports processes requiring this information...
s, file system
File system
A file system is a means to organize data expected to be retained after a program terminates by providing procedures to store, retrieve and update data, as well as manage the available space on the device which contain it. A file system organizes data in an efficient manner and is tuned to the...
s, and web application
Web application
A web application is an application that is accessed over a network such as the Internet or an intranet. The term may also mean a computer software application that is coded in a browser-supported language and reliant on a common web browser to render the application executable.Web applications are...
s.
Imperva claims more than 1,500 customers with thousands of organizations protected through cloud
Cloud computing
Cloud computing is the delivery of computing as a service rather than a product, whereby shared resources, software, and information are provided to computers and other devices as a utility over a network ....
-based deployments. Imperva's customers include leading enterprises, government organizations, and managed service providers who rely on Imperva’s data security solutions.
History
Founded in November 2002 by Shlomo Kramer, Amichai Shulman and Mickey Boodei, Imperva delivers a security platform that offers real-time and automated protection against data loss and theft.The company’s key innovation was the development of the data security and compliance solution, SecureSphere—an appliance that protects web applications from online attacks, secures business-critical databases and files, and mitigates vulnerabilities across all areas of data.
Imperva has received a total of $53.7M in venture capital
Venture capital
Venture capital is financial capital provided to early-stage, high-potential, high risk, growth startup companies. The venture capital fund makes money by owning equity in the companies it invests in, which usually have a novel technology or business model in high technology industries, such as...
funding, including over $20M in its Series D round in April 2008.
- Series A May 2002 $4.7M
- Series B Jun 2003 $12M
- Series C May 2006 $17M
- Series D Apr 2008 $20M
Imperva’s investors include Accel Partners
Accel Partners
Accel Partners is a global venture and growth equity firm funding companies from inception through the growth stage.The firm is based in Palo Alto, California with major offices in Bangalore, Beijing, London, and Shanghai....
, Greylock Partners, Meritech Capital Partners
Meritech Capital Partners
Meritech Capital Partners is a private equity firm focused on late stage venture capital investments in information technology companies with a focus on consumer Internet and media, software and services, enterprise infrastructure, and medical devices....
, USVP and Venrock.
It was announced in June 2011, that Imperva filed for an initial public offering
Initial public offering
An initial public offering or stock market launch, is the first sale of stock by a private company to the public. It can be used by either small or large companies to raise expansion capital and become publicly traded enterprises...
; which means that it will issue common stock
Common stock
Common stock is a form of corporate equity ownership, a type of security. It is called "common" to distinguish it from preferred stock. In the event of bankruptcy, common stock investors receive their funds after preferred stock holders, bondholders, creditors, etc...
or shares to the public for the first time. The company plans to raise $75 million in a November 2011 IPO
Initial public offering
An initial public offering or stock market launch, is the first sale of stock by a private company to the public. It can be used by either small or large companies to raise expansion capital and become publicly traded enterprises...
by offering 5 million shares at a price range of $14.00 to $16.00.
Key Milestones
2011- Files for IPO.
- Named a leader in Forrester’s Wave on Database Activity Monitoring.
- Named the top vendor for WAF in Japan.
- Imperva spins off Incapsula, a cloud-based web application firewall service targeted at small companies.
2010
- Introduced Virtual Data Security Suite
- Introduced File Security Family
- Introduced ThreatRadar To Mitigate Automated, Industrialized Cyber Attacks
- Featured on the front page of the New York Times for a study of 32 million breached passwords.
2009
- SecureSphere Achieves Common Criteria Certification
- ICSA Labs certified Imperva SecureSphere Web Application Firewall
- Extends operations in Asia.
2008
- Techworld names SecureSphere a winner for Network Application Product of the Year
- RSA Secured® Partner Program Certification
2007
- Imperva Ships 1,000th SecureSphere Appliance
2006
- Extends Operations into Europe
2005
- Yankee Group Names Imperva "Market Leader" in Web Application Firewalls
- Imperva Delivers First True Gigabit Application Firewall Solution
2004
- Imperva™ Unveils SecureSphere Web Application Security Appliances WebCohort, Inc. Changes Company Name to Imperva, Inc.
2002
- Shipped first version of SecureSphere
- Company founded
Focus
Imperva’s belief is that an organization’s most important asset today is data—customer, financial and intellectual property, each of which need to be protected from insiders and hackers. To protect data, Imperva claims to have built a data security suite to protect both structured and unstructured data:- To keep data from hackers, Imperva offers a web application firewall. In 2010, the Verizon Databreach report cited that 50% of data breaches were due to external hackers.
- To stop insiders, Imperva offers database protection known as database activity monitoring (DAM). According to the 2008 Verizon Business’ Data Breach Investigations Report, cyber attacks targeting databases accounted for 75 percent of all records compromised in 2008. For unstructured data, Imperva offers a file protection known as file activity monitoring (FAM).
Imperva has published a detailed company mission overview.
Data Security
Imperva’s currently sells SecureSphere, an appliance and has three main components: Web applicationWeb application
A web application is an application that is accessed over a network such as the Internet or an intranet. The term may also mean a computer software application that is coded in a browser-supported language and reliant on a common web browser to render the application executable.Web applications are...
firewalls, Database activity monitoring
Database activity monitoring
Database activity monitoring is a database security technology for monitoring and analyzing database activity that operates independently of the database management system and does not rely on any form of native auditing or native logs such as trace or transaction logs...
, and File Activity Monitoring.
Database Security
Imperva’s Database securityDatabase security
Database security concerns the use of a broad range of information security controls to protect databases against compromises of their confidentiality, integrity and availability...
solutions secure sensitive data stored in databases against compromises of their confidentiality, integrity and availability by providing full visibility into data usage, vulnerabilities and access rights to security, audit and risk professionals. The company enables customers to optimize the deployment by combining remote assessment scans, agent-based monitoring and network activity monitoring.
File Security
Imperva’s File Security solutions protect sensitive files on file servers, storage devices, and content repositories, as well as provide full visibility into data ownership, usage and access rights, which according to GartnerGartner
Gartner, Inc. is an information technology research and advisory firm headquartered in Stamford, Connecticut, United States. It was known as GartnerGroup until 2001....
’s Neil MacDonald is crucial to improving file data security.
Web Application Security
Web application securityWeb Application Security
Web application security is a branch of information security that deals specifically with security of websites and web applications.At a high level, Web application security draws on the principles of application security but applies them specifically to Internet and Web systems...
draws on the principles of application security
Application security
Application security encompasses measures taken throughout the application's life-cycle to prevent exceptions in the security policy of an application or the underlying system through flaws in the design, development, deployment, upgrade, or maintenance of the application.Applications only...
but applies them specifically to Internet
Internet
The Internet is a global system of interconnected computer networks that use the standard Internet protocol suite to serve billions of users worldwide...
and Web
World Wide Web
The World Wide Web is a system of interlinked hypertext documents accessed via the Internet...
systems. By continuously adapting to evolving threats and mitigating the risk of data breaches, Imperva’s Web application security
Web Application Security
Web application security is a branch of information security that deals specifically with security of websites and web applications.At a high level, Web application security draws on the principles of application security but applies them specifically to Internet and Web systems...
solutions protect web applications from cyber attacks predominantly through web application
Web application
A web application is an application that is accessed over a network such as the Internet or an intranet. The term may also mean a computer software application that is coded in a browser-supported language and reliant on a common web browser to render the application executable.Web applications are...
firewalls.
ADC
Imperva has a dedicated research team, the Application Defense Center (ADC) that actively researches current threats and hacker trends. Notably, the ADC launched a Hacker Intelligence Initiative that has helped illuminate hacker activity and organization. They have contributed a lot to helping understand hacker technology and activities:
• PasswordPasswordA password is a secret word or string of characters that is used for authentication, to prove identity or gain access to a resource . The password should be kept secret from those not allowed access....
s:
• Anatomy of SQL injectionSQL injectionA SQL injection is often used to attack the security of a website by inputting SQL statements in a web form to get a badly designed website in order to dump the database content to the attacker. SQL injection is a code injection technique that exploits a security vulnerability in a website's software...
s:
• Search Engine Poisoning:
• Operation PaybackOperation PaybackOperation Payback is a coordinated, decentralized group of attacks on opponents of Internet piracy by Internet activists using the "Anonymous" moniker - a group sometimes affiliated with the website 4chan. Operation Payback started as retaliation to distributed denial of service attacks on torrent...
:
• LulzsecLulzSecLulz Security, commonly abbreviated as LulzSec, is a computer hacker group that claims responsibility for several high profile attacks, including the compromise of user accounts from Sony Pictures in 2011. The group also claimed responsibility for taking the CIA website offline...
:
• Automated web attacks:
The ADC helps drive Imperva’s blog which features technical and nontechnical security discussions.
Industry Recognition
2010- Named the Wall Street Journal’s “Next Big Thing”. Ranked tenth out of 50, and the highest ranked security vendor.
- Named a leader in Forrester’s Wave on Database Activity Monitoring.
- Named the top vendor for WAF in Japan.
- Awarded 2010 Everything Channel Partner Program Guide and Five-Star Partner Rating
- Introduced ThreatRadar To Mitigate Automated, Industrialized Cyber Attacks
- InfoSecurity magazine names Imperva’s WAF product of the year.
- SC Magazine names SecureSphere as a runner up product of the year.
- SC Magazine Australia names SecureSphere as product of the year.
2009
- Named One of 50 Hottest Companies for 2009 in TiEcon Competition
- SecureSphere Achieves Common Criteria Certification
- Finalist in SC Awards 2009 SecureSphere Best Web Application Security Solution
- ICSA Labs certified Imperva SecureSphere Web Application Firewall
2008
- 2008 Editor's Best Award from SQL Server Magazine
- Techworld names SecureSphere a winner for Network Application Product of the Year
- Shlomo Kramer Named CEO of the Year by SC Magazine
- Information Security Magazine "Imperva presented the strongest all-around (WAF) offering"
- Finalist in for SC Magazine Excellence Award - Best Enterprise Security Solution
- RSA Secured® Partner Program Certification
2007
- Red Herring 100 Global Award
- Editor's Choice Award from InformationWeek Magazine
- Red Herring 100 Award—One of the top private companies in North America
- 2007 Readers' Choice Award from Information Security Magazine
- Finalist in the SC Magazine Awards 2007 Europe Best Security Solution for Healthcare
- One of the 25 Best Security Innovations for 2007 by Financial IT Security Magazine
2006
- InfoWorld CTO 25 List name Amichai Shulman
- Editor's Choice for Web Application Firewall by Network Computing
- eWeek Excellence Award
- Shlomo Kramer - Top 20 People Who Changed the Network Industry by Network World
- Most Innovative at the invitation-only RSA Conference 2006 Innovation Station Showdown
- Security Company to Watch by Red Herring Magazine
2005
- Yankee Group Names Imperva "Market Leader" in Web Application Firewalls
- CRN gives Imperva SecureSphere Database Security Gateway 5-Star Recommendation
- Finalist for Red Herring Top 100 Private Companies
- Finalist for Software Newcomer of the Year 2005 "CODiE" Awards
- Imperva Delivers First True Gigabit Application Firewall Solution
2004
- CRN gives Imperva SecureSphere Web Application Firewall 5-Star Recommendation
- InfoWorld Product Review gives Imperva the Highest Score in Application Security
- Imperva™ Unveils SecureSphere Web Application Security Appliances
- WebCohort, Inc. Changes Company Name to Imperva, Inc.
Partners
- A10 NetworksA10 NetworksA10 Networks is a privately held company specializing in the manufacture of application delivery controllers . Founded in 2004 by Lee Chen, co-founder of Foundry Networks, A10 originally serviced just the identity management market with its line of ID Series products...
- ActiveBase
- ArcSightArcSightArcSight, an HP company, was founded in 2000 and is a technology company that provides security information and event management solutions. ArcSight headquarters are located in Cupertino, California, USA, with sales offices around the globe including the United States, the United Kingdom, France,...
- Beyond SecurityBeyond SecurityBeyond Security is a developer of IT security products that specializes in vulnerability assessment and vulnerability management products...
- BMC SoftwareBMC SoftwareBMC Software, Inc. is a multinational corporation specializing in Business Service Management software, with record annual revenue in fiscal 2009 of $1.87 billion...
- CA Technologies
- Cenzic
- Code Green Networks
- Coyote Point Systems Inc.
- Crescendo NetworksCrescendo NetworksCrescendo Networks, Ltd. was a privately held computer networking company headquartered in Sunnyvale, California with regional offices in EMEA and APAC...
- Crossbeam SystemsCrossbeam SystemsCrossbeam Systems is headquartered in Boxborough, Massachusetts and has offices in Europe, Latin America and Asia Pacific. The company makes an open, high-performance hardware and software network security platform that is designed to deploy network security applications from third-party security...
- HP
- IBMIBMInternational Business Machines Corporation or IBM is an American multinational technology and consulting corporation headquartered in Armonk, New York, United States. IBM manufactures and sells computer hardware and software, and it offers infrastructure, hosting and consulting services in areas...
- McAfeeMcAfeeMcAfee, Inc. is a computer security company headquartered in Santa Clara, California, USA. It markets software and services to home users, businesses and the public sector. On August 19, 2010, electronics company Intel agreed to purchase McAfee for $7.68 billion...
- MicrosoftMicrosoftMicrosoft Corporation is an American public multinational corporation headquartered in Redmond, Washington, USA that develops, manufactures, licenses, and supports a wide range of products and services predominantly related to computing through its various product divisions...
- Net OpticsNet OpticsNet Optics, Inc. is a manufacturer of telecommunications equipment. The company was established in 1996 by Eldad Matityahu. It is headquartered in Santa Clara, California and maintains a worldwide market presence through partners and reseller networks...
- NT OBJECTives
- OracleOracle CorporationOracle Corporation is an American multinational computer technology corporation that specializes in developing and marketing hardware systems and enterprise software products – particularly database management systems...
- Prism Microsystems
- Q1 Labs
- QualysQualysQualys, Inc. is the leading provider of software-as-a-service IT security risk and compliance management solutions. Qualys' on demand security risk and compliance management solutions make it possible for organizations to strengthen the security of their networks and conduct automated security...
- Red HatRed HatRed Hat, Inc. is an S&P 500 company in the free and open source software sector, and a major Linux distribution vendor. Founded in 1993, Red Hat has its corporate headquarters in Raleigh, North Carolina with satellite offices worldwide....
- RSA
- SAP AGSAP AGSAP AG is a German software corporation that makes enterprise software to manage business operations and customer relations. Headquartered in Walldorf, Baden-Württemberg, with regional offices around the world, SAP is the market leader in enterprise application software...
- SenSageSenSageSenSage Inc. is a privately held data warehouse software provider headquartered in San Francisco, California. SenSage serves enterprises who use the software to capture and store event data so that it can be consolidated, searched and analyzed to generate reports that detect fraud, analyze...
- SybaseSybaseSybase, an SAP company, is an enterprise software and services company offering software to manage, analyze, and mobilize information, using relational databases, analytics and data warehousing solutions and mobile applications development platforms....
- TriGeo Network SecurityTriGeo Network SecurityTriGeo Network Security is a United States-based provider of security information and event management technology. The company helps midmarket organizations proactively protect networks and data from internal and external threats, with a SIEM appliance that provides real-time log management and...
- VMwareVMwareVMware, Inc. is a company providing virtualization software founded in 1998 and based in Palo Alto, California, USA. The company was acquired by EMC Corporation in 2004, and operates as a separate software subsidiary ....
- VormetricVormetricVormetric Inc. is a privately held data encryption company located in San Jose, CA. It is mainly known for marketing Vormetric Data Security, a data protection software package.-History:Vormetric, Inc. was founded in 2001, but remained closed until 2003...
- WebsenseWebsenseWebsense is a San Diego-based company specializing in Web security gateway software. It enables clients to block access to chosen categories of websites.-History:Websense was founded by Phil Trubey in 1994...
- White hat (computer security)
Selected Customers
Key customers Imperva has cited include:- AccorAccorAccor is Europe's leading hotel group , part of the CAC 40 index , and operates in over 90 countries. Headquartered in Courcouronnes, Essonne, France, near Évry, France, the group owns, operates and franchises 4,229 hotels ranging from economy to luxury on five continents .Previously, the group...
- Agilent TechnologiesAgilent TechnologiesAgilent Technologies , or Agilent, is a company that designs and manufactures electronic and bio-analytical measurement instruments and equipment for measurement and evaluation...
- BlueCross BlueShield of TennesseeBlueCross BlueShield of TennesseeBlueCross BlueShield of Tennessee is the largest health benefit plan company in Tennessee. It is an independent, not-for-profit organization governed by its own board of directors.-General information:...
- Brock UniversityBrock UniversityBrock University is a comprehensive university located in St. Catharines, Ontario, Canada. Brock offers undergraduate, graduate and doctoral degree programs that include co-op and other experiential learning opportunities to an enrolment of over 17,000 full-time students.The enabling legislation is...
- Covelli Enterprises
- Catho Online
- Educational Media FoundationEducational Media FoundationEducational Media Foundation is a not-for-profit organization that operates the K-LOVE and Air 1 radio networks. EMF is based in Rocklin, California....
- Fortune 500Fortune 500The Fortune 500 is an annual list compiled and published by Fortune magazine that ranks the top 500 U.S. closely held and public corporations as ranked by their gross revenue after adjustments made by Fortune to exclude the impact of excise taxes companies collect. The list includes publicly and...
- GoDaddy
- ISACA
- Korea Life Insurance AssociationKorea Life Insurance AssociationThe Korea Life Insurance Association, or KLIA, is a South Korean insurance association.-Members:*Hanhwa Daehan Life Insurance*Korea Allianz Life*Samsung Life*Heungkook Life*Kyobo Life*LIG*Mirae Asset*Kumho Life*Dongbu Life...
- O2 (United Kingdom)O2 (United Kingdom)Telefónica UK Limited is a telecommunications, internet and financial services provider in the United Kingdom owned by Telefónica, forming part of its Telefónica Europe division...
- TechSoup
- The Motley Fool
- VonageVonageVonage is a publicly held commercial voice over IP network and SIP company that provides telephone service via a broadband connection. The company's name is a play on their motto "Voice-Over-Net-AGE"....