Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Check Point WAF is an AI-driven web application firewall and API security solution designed to protect web applications, APIs, and generative AI services from sophisticated cyber threats. The platform leverages advanced machine learning and contextual AI technologies to analyze incoming traffic in real time, identifying malicious activity without depending on static signatures or manually maintained rule sets. By combining supervised and unsupervised AI models, Check Point WAF can detect and block both known and previously unseen threats, including zero-day attacks, OWASP Top 10 vulnerabilities, bot-driven attacks, distributed denial-of-service attempts, malicious file uploads, and API-specific security risks. The solution continuously adapts to the unique behavior of protected applications, reducing false positives and minimizing administrative burden. Built as a cloud-native platform, it supports infrastructure-as-code deployments, DevOps automation, and CI/CD integration, allowing organizations to deploy security controls rapidly and efficiently across modern application environments. Additional capabilities include API discovery and protection, GenAI application security, intrusion prevention, file reputation analysis, and advanced DDoS mitigation. With its automated security model and low-maintenance architecture, Check Point WAF enables organizations to secure critical digital assets, improve operational efficiency, and maintain a strong security posture in dynamic cloud and hybrid environments.

Description

open-appsec is an open-source initiative that builds on machine learning to provide pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks. It can be deployed as add-on to Kubernetes Ingress, NGINX, Envoy and API Gateways. The open-appsec engine learns how users normally interact with your web application. It then uses this information to automatically detect requests that fall outside of normal operations, and sends those requests for further analysis to decide whether the request is malicious or not. open-appsec uses two machine learning models: 1. A supervised model that was trained offline based on millions of requests, both malicious and benign. 2. An unsupervised model that is being built in real time in the protected environment. This model uses traffic patterns specific to the environment. open-oppsec simplifies maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

F5 NGINX Ingress Controller No 
Kubernetes No 
NGINX No 
Quantum Firewall Software R82 Yes 

Integrations

F5 NGINX Ingress Controller Yes 
Kubernetes Yes 
NGINX Yes 
Quantum Firewall Software R82 No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Check Point Software

Founded

1993

Country

United States

Website

www.checkpoint.com/cloudguard/waf/

Vendor Details

Company Name

open-appsec

Founded

2022

Country

Israel

Website

www.openappsec.io

Product Features

Web Application Firewalls (WAF)

Access Control / Permissions No 
Alerts / Notifications No 
Automate and Orchestrate Security No 
Automated Attack Detection No 
DDoS Protection No 
Dashboard No 
IP Reputation Checking No 
Managed Rules No 
OWASP Protection No 
Reporting / Analytics No 
Secure App Delivery No 
Server Cloaking No 
Virtual Patching No 
Zero-Day Attack Prevention No 

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis No 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Web Application Firewalls (WAF)

Access Control / Permissions No 
Alerts / Notifications Yes 
Automate and Orchestrate Security Yes 
Automated Attack Detection Yes 
DDoS Protection No 
Dashboard Yes 
IP Reputation Checking Yes 
Managed Rules Yes 
OWASP Protection Yes 
Reporting / Analytics Yes 
Secure App Delivery No 
Server Cloaking No 
Virtual Patching No 
Zero-Day Attack Prevention Yes 

Alternatives

Alternatives

AppTrana Reviews

AppTrana

Indusface
Traceable Reviews

Traceable

Harness