Qualys TotalAppSec

Data Leakage Prevention

API responses requests are inspected to detect sensitive data (CCN/SSN/ID etc.) and masked if needed.

Risk Mitigation

Dynamically identify and mitigate risks based on organizational tolerance thresholds.

API Traffic Analysis

Gain deep insights into sessions, infrastructure resources and their dependencies.

Dynamic Application Policy Generation

Automatically generates policies for new applications.

API Protection Against Automated Threats

Machine-learning algorithms to detect malicious bot activities targeting APIs from automated attacks such as account takeover attacks, content scraping, etc.

Risk Analytics

Able to record qualitative and quantitative data from API requests to be used in a meaningful way.

Schema Enforcement

All API (content requests API parameters, headers and body) are scanned and ensure they conform to defined schema parameters.

API Security Testing

Uses dynamic application security testing (DAST) and/or fuzzing techniques to identify security misconfigurations and vulnerabilities.

Reporting and Analytics

Radware’s Cloud WAF Application Analytics simplifies security event management by taking massive amounts of alerts and consolidating them into manageable sets.

OWASP Top 10

Identify vulnerabilities documented by OWASP Top 10.

Product Strategy and Rate of Improvement

Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Ease of Implementation

Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Ease of IT Administration

This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Business Value Created

Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Availability and Quality of Training

Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Ease of Data Integration

Use this data to determine whether the product will cause headaches or make data integration easy.

Usability and Intuitiveness

End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Quality of Features

Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Vendor Support

The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Breadth of Features

Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Ease of Customization

Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.