Vercara UltraWAF

Formerly Neustar UltraWAF

The Vercara UltraWAF is an application-layer protection solution designed to safeguard critical applications with complex workflows. According to the vendor, this security offering is tailored to meet the specific needs of small to large enterprises across various industries and professions, including eCommerce, Financial Services, Healthcare, Online Gaming & Gambling, and Communication Service Providers.

Key Features

Flexible features: According to the vendor, Vercara UltraWAF provides flexible features that can be customized to fit the unique security posture of organizations. It offers layered protection to defend critical applications with complex workflows, effectively preventing common threats targeting the application layer such as SQLi, XSS, and CSRF.

Location and infrastructure agnostic: The vendor claims that UltraWAF offers flexibility and freedom to scale effectively, regardless of where applications are hosted. It eliminates the need for hardware requirements, potentially reducing costs, and ensures protection for applications hosted in any environment.

Learning mode: According to the vendor, UltraWAF includes a learning mode that provides traffic profiles to understand the traffic passing through the system. It offers recommendations on relaxation rules based on traffic analysis, helping differentiate between true anomalous behavior and unusual patterns in legitimate traffic.

Customizable signatures: The vendor states that with the UltraWAF policy editor, users can create custom rules in various formats. This enables continuous addition of new threats through captured vulnerabilities, providing signature protection for CVE and CWE, such as CMS vulnerabilities.

Seamless administration: UltraWAF simplifies web security management by allowing users to manage all their web security needs from one place, regardless of the application hosting location. According to the vendor, it enables instant configuration changes and offers reporting and logging capabilities for effective analysis of website and application security.

Secure control: According to the vendor, Vercara UltraWAF provides secure online storage for digital certificates, ensuring the protection of applications using encrypted payloads. It aims to prevent unauthorized access to encryption keys, enhancing overall security.

Augment on-prem WAF: The vendor claims that UltraWAF filters out bad traffic from the public cloud before it reaches the network, potentially reducing the overall traffic load on on-prem devices. This can enhance the effectiveness of existing on-prem WAF investments.

Bot management: According to the vendor, Vercara UltraWAF includes robust bot management capabilities to detect and defend against malicious bots. It aims to ensure visibility and control over interactions with an organization's online presence.

Protection that fits security posture: UltraWAF aims to provide protection based on the organization's security posture. The vendor states that it supports both negative security models (allowing all traffic except identified threats) and zero trust models (denying all traffic except explicitly permitted), aiming to ensure a tailored security approach.