Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

What defines a true AppSec Engineer if not a deep understanding of security in its entirety? Alternatively, you might be more of a specialized expert in a particular area; the choice is yours. Regardless of your focus, our training resources are designed to meet your needs. Enhance your skill set through our ever-evolving library of courses, earn your certification as an AppSec professional, and create a resume that stands out. All of this is available with a single subscription. Do you feel like security is being overlooked in your organization? As an AppSec Engineer, you have the power to change that narrative. Our comprehensive courses empower you and your team to rapidly enhance your AppSec skills and elevate your security practices. If your team requires tailored training, we can accommodate that as well! Our state-of-the-art labs will be ready for you to explore in no time. With one purchase, you'll gain access to our complete range of courses, labs, and educational resources. Our offerings are specifically designed to meet the demands of companies seeking to recruit security professionals. Additionally, we provide ongoing support to ensure you remain at the forefront of security advancements.

Description

open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks. It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways. The open-appsec engine learns how users normally interact with your web application. It then uses this information to automatically detect requests that fall outside of normal operations, and sends those requests for further analysis to decide whether the request is malicious or not. open-appsec uses two machine learning models: 1. A supervised model that was trained offline based on millions of requests, both malicious and benign. 2. An unsupervised model that is being built in real time in the protected environment. This model uses traffic patterns specific to the environment. open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Kubernetes Yes 
AWS Identity and Access Management (IAM) Yes 
Amazon EC2 Yes 
Amazon S3 Yes 
F5 NGINX Ingress Controller No 
NGINX No 

Integrations

Kubernetes Yes 
AWS Identity and Access Management (IAM) No 
Amazon EC2 No 
Amazon S3 No 
F5 NGINX Ingress Controller Yes 
NGINX Yes 

Pricing Details

$49 per user per month
Billed annually
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

AppSecEngineer

Founded

2010

Country

United States

Website

appsecengineer.com

Vendor Details

Company Name

open-appsec

Founded

2022

Country

Israel

Website

www.openappsec.io

Product Features

Security Awareness Training

Analytics / Reporting No 
Certification Training No 
Custom Test Building No 
Gamification No 
Industry Benchmarking No 
Non-Email Based Testing No 
Online Courses No 
Phishing Simulation No 
Pre-Assessments No 
Prebuilt Training Library No 

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis No 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Web Application Firewalls (WAF)

Access Control / Permissions No 
Alerts / Notifications Yes 
Automate and Orchestrate Security Yes 
Automated Attack Detection Yes 
DDoS Protection No 
Dashboard Yes 
IP Reputation Checking Yes 
Managed Rules Yes 
OWASP Protection Yes 
Reporting / Analytics Yes 
Secure App Delivery No 
Server Cloaking No 
Virtual Patching No 
Zero-Day Attack Prevention Yes 

Alternatives

myACI Reviews

myACI

ACI Learning

Alternatives

AppTrana Reviews

AppTrana

Indusface
Kontra Reviews

Kontra

Security Compass
Traceable Reviews

Traceable

Harness