Foresight Releases Cloud-Based Website Security Platform

SOURCE: Foresight

BOSTON, MA – March 26, 2014 –Foresight announced the release of Foresight-AIR, the first cloud-based website security platform to simplify Web Application Firewall (WAF) operations and reduce costs, while significantly improving website security and performance levels. The SaaS solution uses a “smart” Whitelist, which analyzes the website vs. traffic, and protects all layers against malicious cyber-attacks – including DDoS, Zero Day, Malware, Defacement, and Brute Force – for thorough and low-maintenance security.

“Foresight transforms the website security paradigm by providing a combination of an enhanced web application firewall and DDoS mitigation, protecting sites from a broad spectrum of attacks,” stated Foresight co-founder and CTO, Nimrod Luria. “The Platform’s automated Smart Whitelist and Secure Front End (SFE) architecture ensure that organizations can focus on what is most important to their website security.”

How it Works

Current approaches to website security rely heavily on manual configuration and are prone to human error and breaches.  Foresight minimizes the attack surface and eliminates maintenance of thousands of Whitelist rules, making it easier to ramp, operate and maintain than traditional Whitelist or Blacklist WAFs.  Even the most complex websites can be fully protected within three days. Foresight ensures zero downtime—even when a website is under attack, new features are being added, or application changes are being implemented.

Unique Features

– Dynamic Whitelisting – Does not rely on attack signatures. Maps website operations and content, not traffic, to learn the application and create precisely targeted Whitelist profiles, greatly reducing the number of Whitelist rules. Predictable requests, usually accounting for about 75% of requests, are served by the cloud replica.  Malicious requests are fully blocked so the organization can instead focus on the 25% of requests (the critical ones) that hit the backend business layer.

– Virtual Patching – Because of the replication capability, by default, the solution automatically patches the website platform and prevents the exploitation of both known and unknown (Zero Day) vulnerabilities.

– Advanced Logging and Reporting – Foresight’s innovative dashboard enables the organization to examine website security events and drill down into any specific attack to receive detailed information regarding the attacker’s intention and the defense mechanism triggered as a response.

The solution does not store any user data, but rather transfers the data through a secure channel to and from the original site, making the platform fully compliant with PCI DSS and other data security regulations.

Proven Protection and Performance

Foresight has proven success working with dozens of banks, retailers, utilities, academic institutions, and government bodies, with strict security standards.  Security and IT professionals can prevent policy bottlenecks; shorten procedures, and speed time to market of new apps and features, web content, and site changes in near-real-time – and without downtime for users.

“Since IAI began using Foresight, our site has completely withstood many different types of attacks. One massive DDoS attack comes to mind in particular,” explained Sharon Shay, Head of IT Infrastructure for Israel Aerospace Industries.  “The attack lasted 22 days and throughout this period nothing changed from the end user perspective.  Access to the site was uninterrupted and we had ultimate uptime ─ 0% downtime.”

Foresight-AIR is available today and offered as a managed service (SaaS).  Pricing is based on the number of domains and user traffic. The solution can be deployed in three days or fewer. Contact us for a free trial.

About Foresight

Foresight provides a complete, cloud-based web security platform that protects websites against malicious cyber-attacks of all types.  Foresight-AIR comprehensively addresses web security vulnerabilities by providing a holistic solution that protects an environment’s network, host, and application layers.  Dozens of organizations in the retail, financial services, government, and other sectors, have already leveraged Foresight to enable the highest level of security and maximum system performance at all times. Founded in 2011 and funded by Magma Venture Partners and Cedar Fund, Foresight has offices in Boston, London and Israel. Visit www.foresight-air.com or follow us on Twitter @ForesightWSP