Imperva Review, Pricing & Features

Imperva provides enterprise application and data security, including WAF, bot protection, DDoS and API security. Custom pricing; part of Thales Group.

Category
Security
Pricing
Contact for pricing
Verified
Not yet
Last updated
July 20, 2026
Founded
2002
Headquarters
San Mateo, California
Web AppAPIAI

What Is Imperva?

Imperva is a cybersecurity company that provides application and data security products for enterprises. Founded in 2002 and headquartered in San Mateo, California, the company was acquired by French defense and security group Thales in December 2023 and now operates as part of the Thales cybersecurity portfolio while continuing to sell Imperva-branded products.

Imperva's platform spans two main areas: application security, which protects websites, APIs, and applications from attacks and bots, and data security, which discovers, classifies, and monitors sensitive data across cloud and on-premises environments.

Key Features

On the application security side, Imperva offers a Web Application Firewall, advanced bot protection, DDoS protection, DNS protection, client-side protection, account takeover protection, a unified API security platform, and a content delivery network, along with AI-specific application security tooling.

On the data security side, Imperva's Data Security Fabric provides multicloud data discovery and classification, data security posture management, and risk analytics to support compliance programs across large, distributed data estates.

Imperva Pricing

Imperva does not publish self-serve pricing on its website. Prospective customers must contact Imperva's sales team to receive a custom quote based on traffic volume, number of applications or data sources protected, and which product modules are included.

This contact-for-pricing model is typical of enterprise-grade security vendors, where deployments are usually negotiated as part of a broader security contract rather than sold as fixed monthly plans.

Key Features

Pros & Cons

Pros

  • Broad coverage across both application security and data security
  • Backing and resources of Thales Group following the 2023 acquisition
  • Recognized as a leader by multiple analyst firms including Gartner Peer Insights and Forrester
  • Protects a large scale of enterprise traffic (6,200+ enterprises cited)
  • Covers modern threat categories like API abuse and AI application security

Cons

  • No public pricing; requires a sales conversation to get a quote
  • Enterprise-oriented, which may be more than smaller teams need
  • Complex product portfolio can require dedicated security staff to configure fully
  • Post-acquisition integration with Thales may affect roadmap or support processes over time

Frequently Asked Questions

What does Imperva do?

Imperva provides application security (WAF, bot protection, DDoS, API security) and data security (data discovery, classification, posture management) products for enterprises.

How much does Imperva cost?

Imperva does not publish pricing; customers must contact sales for a custom quote based on their traffic and coverage needs.

Is Imperva still an independent company?

No. Imperva was acquired by Thales Group, completing the deal in December 2023, and now operates as part of Thales's cybersecurity portfolio while keeping the Imperva brand.

When was Imperva founded?

Imperva was founded in 2002 and is headquartered in San Mateo, California.

Who uses Imperva?

Imperva is used by enterprises that need to protect customer-facing web applications, APIs, and sensitive data from attacks; the company states it protects over 6,200 enterprises.

Related Tools