FortiWeb Cloud WAF-as-a-Service delivers the protection of a full-featured WAF as you rapidly roll out applications in public cloud environments. There's no need to manage and maintain your own infrastructure. Your attack surface changes every time you deploy an Internet-facing application, and with public clouds, you can deploy those Internet-facing applications more rapidly than ever. FortiWeb can defend the attack surface of any web-based application you deploy. This includes both applications that may only run for a short time and long-lived applications that can evolve rapidly as you adopt a DevOps approach to deliver applications and services at high velocity. Protecting applications with a SaaSdelivered WAF solution also provides the option to pay as you go. This enables the same protection for all of your public cloud hosted applications without standing up excess capacity that might be underutilized.
Web application security
Protect against the OWASP top 10 and other known and unknown threats using FortiWeb Cloud's comprehensive web application security, including IP reputation, DDoS protection, protocol validation, and application attack signatures.
Internet-facing API protection
Seamlessly and automatically discover API endpoints and enforce security without having to manually publish APIs or integrate into CI/CD processes. FortiWeb Cloud uses sophisticated machine learning algorithms to automatically analyze and catalog APIs and their schema. FortiWeb Cloud quickly deploys positive and negative security model policies without requiring any manual intervention and provides security teams with the visibility and security they require without slowing down software release cycles.
AI-based bot defense
Block the full range of malicious bot activity (content scraping, denial of service, data harvesting, transaction fraud) quickly and easily. This feature protects websites, mobile applications, and APls from automated threats. FortiWeb Cloud bot mitigation features include thresholds, biometric bot detection, bot deception, and machine learning-based bot mitigation.
Simplified deployment
Once activated via your favorite cloud marketplace or via an annual contract purchase, follow the built-in setup wizard to deploy in minutes. With predefined policies and machine learning to automatically keep up with your changing application, FortiWeb Cloud delivers the security you need within minutes without the complexity required when setting up other WAF solutions. More advanced users can easily enable additional security modules if needed, free of charge.
Regulatory compliance
Address regulatory compliance requirements for public-facing applications, including the PCI DSS 6.6. WAF requirement.
DDoS protection
Protect against volumetric-based attacks and more sophisticated low-and-slow attacks that can cripple web servers. Minimize downtime and ensure business continuity with FortiWeb Cloud DDoS protection for L3/4 and Layer7 attacks.
