Audience
DevOps engineers
About open-appsec
automatic web application & API security using machine learning
open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks.
It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways.
open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions.
Other Popular Alternatives & Related Software
SKUDONET
SKUDONET Enterprise Edition is an Application Delivery and Security Platform built on Linux Debian 12.5 LTS for critical enterprise environments. Formerly known as Zevenet, it provides advanced L4/L7 load balancing, integrated WAF, TLS management with Let’s Encrypt and wildcard support, and protocol-aware traffic inspection across on-premises, hybrid, or cloud deployments, including SkudoCloud SaaS.
A free trial is available for evaluation on the SKUDONET website.
Key Features & Benefits:
• High Availability: Clustering and failover to minimize downtime.
• Advanced Security: WAF, L7 filtering, DoS protection, TLS with Let’s Encrypt and wildcard support.
• Scalability: Optimized for high-throughput workloads with multi-core processing and efficient packet handling.
• Traffic Control: Session persistence, custom routing rules, and granular L4/L7 inspection.
• Centralized Management: Unified dashboard for configuration, monitoring, and policy automation.
Learn more about SKUDONET
Fastly
Empower your developers, connect with your customers, and grow your business with today’s leading edge cloud platform. Deliver the best online experiences possible with our edge cloud platform, built to strengthen your current teams and technology. We move data and applications closer to your users — at the edge of the network — to help your websites and apps perform faster, safer, and at global scale. Fastly's highly programmable CDN gives you the freedom to customize delivery right at the edge. Delight your users with the content they want at their fingertips. Our powerful POPs, driven by solid-state drives (SSDs) and hosted in well-connected locations around the world, help us keep more content in cache longer for fewer trips to the origin. Instant Purge and batch purging with surrogate keys let you cache and invalidate highly dynamic content with a mean purge time of 150 milliseconds*. Serve headlines, inventory, or weather forecasts that are always up to date.
Learn more about Fastly
Fortinet FortiWeb Web Application Firewall
Unprotected web applications and APIs are the easiest point of entry for hackers and vulnerable to a number of attack types. FortiWeb's AI-enhanced and multi-layered approach protects your web apps from the OWASP Top 10 and more. FortiWeb ML customizes the protection of each application, providing robust protection without requiring the time-consuming manual tuning required by other solutions. With ML, FortiWeb identifies anomalous behavior and, more importantly, distinguishes between malicious and benign anomalies. The solution also features robust bot mitigation capabilities, allowing benign bots to connect (e.g. search engines) while blocking malicious bot activity. FortiWeb also features API discovery and security, as well as threat analytics to identify meaningful security incidents.
FortiWeb is available as an appliance, VM, and fully featured WAF-as-a-Service - which is available to trial and purchase in most cloud marketplaces.
Learn more about Fortinet FortiWeb Web Application Firewall
AppTrana
Indusface’s AppTrana is a fully managed web application firewall that ensures risk-based protection with its DDoS, API risk, and Bot mitigation services while assuring web acceleration with secure CDN. Combining automated scanning with manual pen-testing, it detects application vulnerabilities. All of this with 24x7 expert support to meet zero false-positive guarantees.
Indusface is the only vendor to be named Customers’ Choice for WAAP in all the 7 segments of the Gartner VoC 2022 Report.
Learn more about AppTrana
Pricing
Free Version:
Free Version available.
Free Trial:
Free Trial available.
Integrations
Company Information
open-appsec
Founded: 2022
Israel
www.openappsec.io
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Cloud
Linux
On-Premises
Training
Documentation
Live Online
Videos
Support
Phone Support
24/7 Live Support
Online
open-appsec Frequently Asked Questions
Q: What kinds of users and organization types does open-appsec work with?
open-appsec works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does open-appsec support in their product?
open-appsec supports these languages: English.
Q: What kind of support options does open-appsec offer?
open-appsec offers support via phone support, 24/7 live support, and online.
Q: What other applications or services does open-appsec integrate with?
open-appsec integrates with: F5 NGINX Ingress Controller, Kubernetes, and NGINX.
Q: What type of training does open-appsec provide?
open-appsec provides training in the form of documentation, live online, and videos.
Q: Does open-appsec offer a free trial?
Yes, open-appsec offers a free trial.
open-appsec Product Features
Application Security
Analytics / Reporting
Supported
Open Source Component Monitoring
Supported
Third-Party Tools Integration
Supported
Training Resources
Supported
Vulnerability Detection
Supported
Vulnerability Remediation
Supported
Source Code Analysis
Not Supported
Web Application Firewalls (WAF)
Alerts / Notifications
Supported
Automate and Orchestrate Security
Supported
Automated Attack Detection
Supported
Dashboard
Supported
IP Reputation Checking
Supported
Managed Rules
Supported
OWASP Protection
Supported
Reporting / Analytics
Supported
Zero-Day Attack Prevention
Supported
Access Control / Permissions
Not Supported
DDoS Protection
Not Supported
Secure App Delivery
Not Supported
Server Cloaking
Not Supported
Virtual Patching
Not Supported