Marketing description

Protect every web app, hosted anywhere, in minutes.
Deploying and configuring traditional web application firewalls (WAFs) can be prohibitively complex and time-consuming. Indeed, some simply install a WAF in default mode for compliance, and never configure it correctly - leaving them vulnerable to application-based threats.
You can deploy, configure, and get Barracuda WAF-as-a-Service up and running in just minutes. Pre-built templates protect your applications immediately, and an intuitive interface makes it simple to fine-tune specific policies. Full-spectrum DDoS protection ensures continuous application availability. And the built-in Barracuda Vulnerability Remediation Service automatically scans your applications and remediates vulnerabilities.

Key selling points

• Ensure protection from web attacks and DDoS
• Protect APIs and mobile apps
• Block malicious bots and automated attacks
• Secure app delivery and increase availability
• Control access and authentication
• Automate and orchestrate security

Product features

• Ensure protection from web attacks and DDoS
  The Barracuda web application firewall protects applications, APIs, and mobile app backends against a variety of attacks including zero-day threats, data leakage, and application-layer denial of service (Dos) attacks. By combining both positive signature-based policies with robust anomaly detection capabilities, Barracuda WAF can defeat most sophisticated attacks targeting your web applications.
• Protect APIs and mobile apps
  Mobile applications and APIs are widely used by organizations. APIs are the critical backbone for every connected service and ensuring and maintaining the security and availability of APIs are increasingly critical for businesses. The Barracuda web application firewall provides comprehensive security and availability for APIs. It can secure both XML and JSON APIs against all types of attacks, including API farming and scraping. The Barracuda WAF also secures the XML and JSON parsers, all while providing complete, granular access control. The built-in rate control and application delivery features enable consistent and reliable API delivery within SLAs to ensure seamless scalability, all while virtual patching provides an automated feedback loop for security.
• Block malicious bots and automated attacks
  A lot of Internet traffic is generated by automated bots. A significant part of this automated traffic is malicious - either bots that scrape and steal your data for profit, or automated attacks to compromise your web applications. Protect your websites from content scraping, data theft, and non-human traffic that slows the overall availability of your web applications. The Barracuda WAF built-in bot detection technologies can distinguish between bad bots and good bots through a variety of countermeasures. Advanced Bot Protection uses cloud-based machine learning to provide bot spam detection, credential stuffing prevention, request risk scoring and client finger printing. This ensures your applications are ready to perform optimally for your customers, clients, employees, and partners.
• Secure app delivery and increase availability
  All applications need to be delivered securely over HTTPS. However slow-loading and unsecure applications are not only frustrating for everyone but can expose sensitive information. The Barracuda web application firewall helps you enable HTTPS quickly and easily, even for legacy applications, with Instant SSL capabilities. With a hardened SSL/TLS stack and performance acceleration capabilities, Barracuda WAF ensures fast, secure and reliable access to all your web-facing applications. Built-in layer 7 load balancing, caching and compression technologies cut latency and deliver consistent, reliable access for every user.
• Control access and authentication
  WAF Control Center provides a central point of control for all your Barracuda WAF deployments. It simplifies management, helps ensure up-to-date policies, and provides the tools necessary to deliver ongoing security for your applications wherever they reside. Furthermore, role-based access controls enable DevOps, SecOps, and NetOps teams to manage security at every stage of the application lifecycle with single pane-of-glass simplicity.
• Automate and orchestrate security
  As organizations embrace DevOps to improve agility and time-to-market, they are finding that current application security processes are disparate, prone to human error, and unable to keep pace with development lifecycles. Orchestrating the security is just one part of the process. The more critical second part is to ensure that rules and policies are kept updated and new vulnerabilities are quickly identified and virtually patched. Barracuda Vulnerability Remediation Service enables SecOps teams to automate the vulnerability identification and remediation process to ensure a continuously robust security strategy as applications evolve.