Thales launches Imperva for AWS on AWS Marketplace

Thales has launched Imperva for AWS on AWS Marketplace as a software-as-a-service offering, bringing its web application firewall to Amazon Web Services customers.

The service is designed to protect web applications and application programming interfaces from cyber threats and malicious bot activity. Built on AWS services, it deploys on Amazon CloudFront, the cloud provider's content delivery network.

The launch comes as attacks on applications and APIs continue to grow. According to Thales' latest Bad Bot Report, automated traffic now accounts for 53% of all internet requests, while 27% of bot attacks target APIs directly.

That trend has increased scrutiny on tools that can filter malicious traffic closer to where applications are delivered. Imperva for AWS keeps traffic within the AWS network rather than routing it outside the cloud provider's environment.

Thales is positioning the service as a way for customers to add application-layer security without additional deployment work. The offering is available through AWS Marketplace on a pay-as-you-go basis.

Cloud focus

Imperva for AWS gives organisations running customer-facing services on AWS another option for a managed web application firewall delivered as SaaS. It also provides centralised visibility and policy management across AWS and other cloud environments.

Thales is targeting businesses that need to protect web applications, APIs and client-side code, including regulated organisations with stricter security and governance requirements. The service is intended to reduce operational complexity and speed up onboarding.

Use of Amazon CloudFront is central to the launch. Thales said the deployment model allows the firewall to operate natively on the AWS network through CloudFront's global footprint of more than 750 points of presence.

Tim Chang, Vice President of Application Security at Thales, outlined the company's position on the product's deployment model.

"Imperva for AWS makes it easy for customers to protect their applications and APIs with enterprise-grade security that works out of the box. By deploying natively on Amazon CloudFront's 750+ points of presence, we keep all traffic within the AWS network, delivering protection at scale with zero added latency," Chang said.

Security market

The release reflects a wider shift in the security market as companies try to address threats that increasingly target APIs rather than traditional web interfaces. Automated tools and bot traffic now make up a larger share of internet activity, raising the importance of controls at the application layer.

Web application firewalls have long been used to block common exploits and abusive traffic, but cloud deployment models are changing how these products are delivered. Vendors are increasingly trying to integrate more closely with large cloud platforms to simplify deployment and management for customers.

For Thales, the move extends Imperva's presence in AWS environments and broadens how the company distributes its application security products. Listing the service on AWS Marketplace also places it in a procurement channel many cloud customers already use to buy and manage third-party software.

The product is intended to provide consistent application security as cloud estates expand across multiple environments. It is also aimed at organisations seeking stronger control over application, API and AI-related security risks without increasing operational overhead.

Thales employs more than 85,000 people across 65 countries and reported sales of €22.1 billion in 2025. The group operates across defence, aerospace, and cyber and digital markets, with cybersecurity and cloud technologies among its research and development priorities.