Model catalogue
48 models and 35 licence SKUs across the three vendors. Tick up to six models from any vendor to compare them side by side.
Imperva · Imperva WAF Gateway / Cloud WAF
Imperva sizes a gateway on sustained throughput and on transactions per second, with the number of protected servers and the TLS handshake rate as secondary limits. Its gateways are normally deployed as a pair behind a load balancer rather than in an active/passive couple, and the management server is sized separately from the data path.
Imperva licensing
What each line does, and whether it is mandatory on every deployment of this platform.
| Licence / subscription | Type | Mandatory | What it covers |
|---|---|---|---|
| FlexProtect for Applications | Subscription | Yes | The licence that entitles everything else. A pool of credits drawn down against WAF Gateway, Cloud WAF, RASP, Advanced Bot Protection, API Security and Attack Analytics, so capacity can be moved between them during the term. Mandatory. |
| WAF Gateway appliance or virtual gateway | Module | Yes | The data-path gateway itself: hardware, or the virtual appliance image and its entitlement. |
| MX Management Server | Management | Yes | Policy, audit, reporting and gateway registration - hardware or virtual. Gateways will not enforce policy without one, so it is never optional for an on-premises design. |
| SecureSphere Operations Manager (SOM) | Management | Optional | A tier above several MX servers, for estates past roughly 10 gateways or several data centres under one policy. |
| Cloud WAF subscription | Subscription | Optional | SaaS WAF by site, clean bandwidth and request volume. Includes CDN and layer 3/4 and layer 7 DDoS protection. |
| Advanced Bot Protection | Subscription | Optional | Device fingerprinting, behavioural analysis and JavaScript or SDK challenges against scraping, credential stuffing and card cracking. Bought separately from the WAF policy. |
| API Security | Subscription | Optional | Continuous API discovery from live traffic, schema validation, and detection of sensitive data returned by an endpoint. |
| Account Takeover Protection | Subscription | Optional | Detection of compromised-credential logins, with a verdict per login attempt, fed by Imperva breach intelligence. |
| Attack Analytics | Subscription | Optional | Correlates thousands of alerts into a handful of narrated incidents. The usual answer to WAF alert fatigue, and normally bought with the gateway. |
| Imperva RASP | Subscription | Optional | Runtime protection inside the application itself, for attacks that do not present as malicious at the perimeter. Drawn from the same FlexProtect pool. |
| Data Security (Database Activity Monitoring) | Subscription | Optional | Database-tier monitoring and protection under the same management plane, so a web attack and the query it produced can be seen together. |
| Imperva Support (Standard / Enhanced / Premium) | Support | Yes | Software and policy updates, TAC access and hardware replacement. Enhanced and Premium shorten response times and add a named contact. |
Figures are indicative values held for relative sizing between models, last reviewed 2026-09. Confirm the final model against the current vendor datasheet before quoting.