NOMINATION HIGHLIGHTS

Cloudbric WAF+ is an intelligent, cloud-based WAAP SaaS service designed for enterprises of all sizes. Featuring exceptionally high true-positive rate, its technology is based upon Threat DB compiled from about 750,000 sites. Cloudbric WAF+ is patented in the US, Japan, and Korea, delivering core WAAP capabilities including WAF features, API protection, DDoS mitigation, and bot management with malicious IP blocking and optimized security policy management as one service.

Achievements: PCI DSS v.4.0.1

According to the Gartner WAAP report, PCI DSS v.4.0.1 is a mandatory feature for web application and API Security. Penta Security’s Cloudbric WAF+ have achieved this certification as a service provider, showing its robust cybersecurity technology and payment data protection.

Innovations: 6-in-1 Cybersecurity-as-a-Service

Unlike traditional WAFs, Cloudbric WAF+ delivers 6-in-1 security features.

· WAF
Using its logic-based detection engine to protect HTTP and HTTPS-based web traffic based on OWASP Top 10

· API Security
Protecting API traffic across JSON, YAML, and XML based on OWASP API Security Top 10

· DDoS
Mitigating DDoS attacks through smart traffic filter from L3, L4, and L7 attack layers

· Bot Control
Manage not only malicious bots but also bots needed for websites’ operation such as search engine bots or business bots

· SSL/TLS
Offering free SSL/TLS certificates based on international cryptographic security protocols

· Malicious IP
Cloudbric Labs Threat DB, a threat intelligence DB built from over 750,000 websites, distinguishes malicious IP and blocks for IP protection

Furthermore, Cloudbric WAF+ manages industry-leading true positives of about 92%. This is powered from Penta Security’s proprietary logic-based detection engine, COCEP, and Threat DB collected from 750,000 sites to detect malicious IP and Bots.

As AI threats are increasing, Cloudbric WAF+ is planning to implement AI features into Cloudbric WAF+ to become a future-ready solution.

Impact: Logic-Based Cloud Security Solution

Operating across diverse markets (Europe, APAC, North America) since 1997, we have accumulated an unparalleled volume of data and references compared to other cloud security solutions. Beyond simple IP-based protection, our logic-based threat intelligence enables more precise web application security through advanced threat detection capabilities.