Radware launches a best-of-suite approach to cloud application protection

Cyber security vendor Radware has announced it advanced its cloud application protection services to create a best-of-suite offering.

To deliver complete visibility and control, the suite combines the company’s best-of-breed application protection solutions in one seamless platform, all manageable through a single pane of glass.

Apps include Radware’s cloud DDoS protection service, cloud web application firewall (WAF) service, API  protection, bot manager, and just-released client-side protection. Radware’s best-of-suite solution is CDN agnostic and available with fully managed services.

For maximum security, the platform uses advanced automation to protect web and mobile applications and their APIs across on-prem, private and public clouds, and Kubernetes environments. It defends against a full array of application layer attacks, ranging from HTTP DDoS and bot attacks to OWASP Top 10 and zero-day attacks, API abuse, and supply-chain attacks like formjacking.

“Faced with tighter budgets and a shortage of security expertise, companies can no longer deal with the overhead and noise involved in protecting siloed environments using a collection of products from different vendors. Not only does it drive up total cost of ownership, but it also leads to gaps in protection and security compromise,” said Gabi Malka, Radware’s chief operating officer.

“Our best-of-suite approach represents another strategic move in delivering on our commitment to holistic application protection. From browser to server side, the 360- degree solution blankets the application environment against application layer attacks, so organisations can easily scale their security as their applications evolve and business grows.”

Along with its best-of-suite strategy, Radware introduced an advanced new client-side

protection solution, which secures the data path between an end user’s browser and third-party services in the application supply chain.

To protect an end user’s personally identifiable information, and credit card and login data from in-browser threats, the solution continually monitors third-party JavaScript services and client-side activity, automatically sending alerts and blocking suspicious requests.

The line of defence not only helps companies adhere to privacy and datasecurity compliance standards, but it also assists in preventing data leakage that can lead to account takeovers as well as mitigating a variety of security threats. This includes formjacking, Magecart, card skimming,payment and digital skimming, Java script skimmers, e-skimming, and DOMXSS attacks.

“As server-side security advances, more hackers are exploiting vulnerabilities and launching malicious attacks through the less protected and seldom monitored client-side supply chain,” said Malka. “Without client-side protection, organizations are flying blind. They’re exposing end users to third-party services that are embedded in their applications and over which they lack visibility and control.”