DDoS Protection

Imperva Incapsula DDOS PROTECTION

Imperva Incapsula secures websites against the largest and smartest types of DDoS attacks—including network, protocol and application level (Layers 3, 4 & 7) attacks—with minimal business disruption. Our cloud-based service keeps online businesses up and running at high performance levels even under attack, avoiding financial losses and serious reputation damage.

Incapsula service is built to handle the largest volume-based attacks, such as SYN flood and DNS amplifications, and also mitigates sophisticated application layer attacks by implementing advanced and progressive challenge mechanisms. The service automatically and transparently mitigates DDoS attacks with minimum false positives, so that site visitors won’t know that the site is under attack.

Incapsula DDoS Protection service includes real-time dashboards to monitor & analyze attacks as they happen and features a dedicated 24/7 NOC, manned by our experienced security experts, in order to ensure enterprise-grade uptime SLA when under attack.
Download Datasheet
See More



Website DDoS Protection

The Incapsula Website DDoS Protection solution is an always-on, cloud-based DDoS defense service that automatically detects and mitigates all types of DDoS attacks launched at websites and Web applications.


This DDoS protection service is built on top of the Incapsula Content Delivery Network (CDN) and leverages a PCI DSS compliant Web Application Firewall technology. As a result, in addition to securing websites against DDoS attacks, Incapsula also guards against exploitation of application vulnerabilities and ensures that website traffic runs normal operating speeds, even during large-scale volumetric attacks.


Infrastructure DDoS Protection

Enabled via GRE tunneling and leveraging Border Gateway Protocol (BGP) routing, Infrastructure Protection is an on-demand security service that safeguards critical network infrastructure from volumetric and protocol-based DDoS attacks. Powered by proprietary “Behemoth” scrubbing servers capable of mitigating 170Gbps of DDoS attacks per appliance that ensure the Incapsula network is never overwhelmed. Infrastructure Protection complements other CDN-based services from Incapsula to provide complete protection from all DDoS threats and prevent DDoS for all network protocols and Internet-connected devices.


Name server DDoS Protection

Name Server DDoS Protection safeguards DNS servers from DDoS attacks. Deployed as an always-on service, NS DDoS Protection automatically identifies and blocks attacks seeking to target DNS servers, while also accelerating DNS responses. Name Server DDoS Protection is seamlessly compatible with other security solutions offered by Incapsula, providing customers with the most robust DDoS defense offering on the market.