UBIKA WAAP Container
Deliver trustworthy cloud native applications, by embedding advanced protection into your DevOps practices
The challenges of modern cloud native applications
One approach is not enough
Security tools like SAST and DAST only expose the vulnerability and, by using only one of these approaches, it is easy to miss critical issues.
It is not only about vulnerabilities
You must consider the OWASP Top 10, but keep in mind that attacks like credential stuffing, are just as important.
Legacy WAFs acting in warning mode
The traditional false positive management model is not suited to the agile software factory we find in cloud native and microservices approaches.
Meet our Cloud Workload Protection Platform (CWPP)
| Broken Access Control | |||
| Cryptographic Failures | |||
| Injection (SQL, command, LDAP, etc.) | |||
| Insecure Design | |||
| Security Misconfiguration | |||
| Vulnerable & Outdated Components | |||
| Identification & Authentification Failures | |||
| Software and Data Integrity Failures | |||
| Security Logging and Monitoring Failures | |||
| Insufficient Logging & Monitoring |
What does UBIKA WAAP Container do for DevOps/DevSecOps teams?
Easily integrates into existing DevOps universe
This container native solution is implemented directly within the developers’ CI/CD pipeline with the already existing tools like Gitlab, Jenkins etc. to simplify collaboration. Achieving interoperability within the CI/CD domain is key. The solution uses the same formats (as YAML, GO like), form factor (Docker images), languages and concepts which results in easy management, low TCO and no new learning curve for developers.
Increase ROI by automatically adapting to app traffic
Available as an optional feature, Extended API Security (EAS) allows additional engines to be activated in the workflow to strengthen your API security and extend it to custom applications and machine-to-machine communication. It helps validate JSON/XML structure using schemas and path using Swagger for sitemap. EAS enables businesses and public authorities to maintain the agile advantage of API-led development while ensuring security and compliance.
Improve security with context-enriched description
The solution along with context description (such as used persistence type, programming language, server OS, data format) is integrated in a configuration file close to the application code. This keeps security up to date, aligning with the application’s version. Security policies can be adapted automatically by invoking relevant security engines. Thus, it improves overall security with fewer false positives.
Simplify approach with proactive engines and positive security model
Built with API first mindset, the solution allows OpenAPI file enforcement to secure your entire lifecycle. It activates security engines built on 20 years of expertise, rate limiting, and bot mitigation capabilities to respond to OWASP Top 10, zero-day attacks, DoS and threats like credential stuffing that do not exploit CVEs.
Our key differentiators
High level of innovation
- Focus on false positive reduction by effective approaches like context description, positive security model etc.
- Increase accountability by versioning security policy.
- Utilize security engines built on 20 years of proven expertise.
Intelligent scaling options
- Save resource related costs by scaling out or down automatically.
- Update easily leveraging microservices.
- Container native technology addresses the needs of your modern cloud native applications.
Delight yourself with our free resources
Key considerations when choosing a web application firewall
Whitepaper: Key considerations when choosing a web application firewall This whitepaper digs into the key considerations for selecting a powerful WAAP that combats all your …
Welcome to UBIKA!
Welcome to UBIKA! Protecting your web applications and APIs, however they are developed and wherever they are deployed, is UBIKA’s reason for being. We have …
UBIKA will participate to COTER 2022
UBIKA will participate to COTER 2022 UBIKA will take part of the COTER congress in on June 14-15th in Saint Malo, France. UBIKA the new DenyAll …
