SecureSphere 9.5 Automates Profile Optimization to Minimize Complexity of Emerging Web Application Frameworks

Redwood Shores, Calif., May 17, 2012 – Imperva, Inc. (NYSE:  IMPV), a pioneer and leader of a new category of data security solutions for high-value business data in the data center, today announced that the SecureSphere 9.5 Web Application Firewall has enhanced Dynamic Profiling with augmented support for JavaScript Object Notation (JSON). Dynamic Profiling simplifies the management of dynamic and complex Web application frameworks with a finely-tuned profiling to help identify aberrant behavior that often indicates abuse.

The emergence of Web 2.0 has resulted in widespread adoption of complex Web application frameworks, which can be difficult to efficiently secure. Imperva’s patented Dynamic Profiling capability helps to improve security accuracy by recognizing unusual Web requests and by validating input. Dynamic Profiling also can be used to detect attacks that evade by signature-based protection, including parameter tampering and cookie injection.  With this release, the Dynamic Profiling has been updated with experience across numerous enterprises, and is now optimized for contemporary methods of application deployments.

“A great challenge that IT departments face today is staying abreast with the rapid pace of relevant new Web application technologies and understanding how they fit into the enterprise security model,” said Amichai Shulman, CTO, Imperva. “With the latest version of SecureSphere, Imperva is supporting these new application frameworks and automating management of modern, dynamic applications, helping IT departments to stay ahead of this complexity.”

SecureSphere Web Application Firewall (WAF) protects applications from security threats by combining multiple security engines into a cohesive Web defense. Certified by ICSA Labs, SecureSphere provides protection against the OWASP Top Ten, including SQL Injection, XSS and CSRF, and it addresses PCI 6.6. New SecureSphere 9.5 capabilities include:

Automated Profile Optimization – SecureSphere WAF can automatically detect and suggest profile adjustments to accommodate dynamic, Web 2.0 and RESTful Web applications without a need for manual trouble-shooting.

Streamlined Profile Management – SecureSphere simplifies the management of thousands of Web pages by focusing on Web pages with form fields and parameters, reducing the size of the application profile while still helping to secure the entire Web application.

JSON Support – SecureSphere augments its JSON support with enhanced validation of user input and identification of unusual application behavior to stop hackers who abuse Web 2.0 applicationsm.

SecureSphere version 9.5 is expected to be available in June 2012.  For more information please visit www.imperva.com

About Imperva

Imperva is a pioneer and leader of a new category of data security solutions for high-value business data in the data center. With more than 1,800 end-user customers and thousands of organizations protected through cloud-based deployments, Imperva's customers include leading enterprises, government organizations, and managed service providers who rely on Imperva to prevent sensitive data theft from hackers and insiders. The award-winning Imperva SecureSphere identifies and secures high-value data across file systems, web applications and databases. For more information, visit www.imperva.com, follow us on Twitter or visit our blog.

Forward Looking Statements

This news release contains forward-looking statements, including without limitation those regarding anticipated benefits of SecureSphere 9.5 Web Application Firewall. These forward-looking statements are subject to material risks and uncertainties that may cause actual results to differ substantially from expectations. You should consider important risk factors, which include: the risk that our products are not adopted at levels that we anticipate; the risk that our products are not perceived as providing a solution against Web application attacks; and other risks detailed under the caption “Risk Factors” in Imperva’s quarterly report on Form 10-Q filed with the Securities and Exchange Commission, or SEC, on May 11, 2012 and its other SEC filings on the SEC’s website at www.sec.gov.   We undertake no obligation to update any of the forward-looking statements contained herein after the date of this release, whether as a result of new information, future events or otherwise.

 © 2012 Imperva, Inc. All rights reserved. Imperva, the Imperva logo and SecureSphere are trademarks of Imperva, Inc.

 Press Contact:

Darshna Kamani

020 7183 2839