The community will be in read-only from Monday 11:59pm (PT) to Wednesday 7:30am (PT)
The community will be in read-only from Monday 11:59pm (PT) to Wednesday 7:30am (PT)
WebInspect
cancel
Showing results for 
Search instead for 
Did you mean: 

Difference between Web Application Firewall (WAF) and WebInspect

SOLVED
Go to solution
Highlighted
hamzehhaivadi
Occasional Advisor

Difference between Web Application Firewall (WAF) and WebInspect

Hi,

I'd like to know what are the differences between WAF and WebInspect?

If a company already had WAF, do they need WebInspect or not?

Thanks

1 REPLY
HansEnders
Honored Contributor
Solution

Re: Difference between Web Application Firewall (WAF) and WebInspect

HP WebInspect is a proactive testing tool used to high-light coding flaws expressed as web application security issues.  Its ultimate goal is to help  developers identify and fix these issues so that their live code is hardened and able to withstand attack, whether coming from external or internal sources.

 

"WAF" stands  for "web application firewall" which is generally an in-line appliance or software that detects malicious web application specific attacks and blocks them on the perimeter.  HP TippingPoint is a major product family in the WAF market, and is capable of absorbing HP WebInspect scan results to be used as blocking rules in the interim period that it takes for the development team to fix the issues high-lighted.


-- Habeas Data
HPE Fortify Customers-Only Forums – https://protect724.hpe.com/community/fortify
//Add this to "OnDomLoad" event