Blogs

open-appsec ML-based WAF protects against modern SQLi AutoSpear evasion techniques

Modern SQLi evasion techniques evolve day by day raising the question of whether traditional WAF systems are able to handle this challenge.

Feb 19, 20234 min read

Article explains how open-appsec ML-based engine allow pre-emptive protection against zero-days and how to configure it.

Feb 6, 20238 min read

Claroty developed a bypass for WAF products. The attack involves appending JSON syntax to SQL injection. Many leading WAFs were vulnerable.

Dec 9, 20224 min read

This articles compares NGINX App Protect signature-based WAF and open-appsec free open-source ML-based WAF.

Nov 17, 20224 min read

Why you should perform pentesting, how to fix common issues discovered and how to mitigate using a WAF.

Nov 11, 20227 min read

open-appsec deployment package does not bring OpenSSL. The library installed during deployment is version 1.1.1, which is not vulnerable.

Oct 31, 20221 min read

Pre-emptive web app & API threat protection against OWASP-Top-10 and zero-day attacks for Kubernetes Ingress, NGINX, Envoy and API Gateways

Oct 26, 20223 min read

open-appsec ML-based WAF provides out-of-the-box protection against the latest "text4shell” vulnerability (CVE-2022-42889)

Oct 18, 20223 min read

In today's environment of tested and proven ML, there is no reason to accept low expectations for protection.

Sep 30, 20225 min read

A deep look at zero-day exploits and whether it is possible to avoid being the victim of one.

Sep 18, 20228 min read

Open-source has enabled the tech industry to creatively use, build, connect and innovate. Can you imagine a modern tech stack without...

Aug 25, 20222 min read