Cybersecurity Overhaul: Thales and Imperva Unite for Integrated Security

Summarize with:



Cybersecurity is getting a much-needed overhaul. Forget scattered tools; the future is integrated platforms, and Thales and Imperva are betting big on it. They’re combining forces to offer businesses a truly unified defense, from data protection to application security.

This integration isn’t just about combining products. It’s about giving companies a single, clear view of their entire risk posture. Think AI and machine learning doing the heavy lifting, spotting threats others miss. This whole story comes from Sander Almekinders at Techzine.nl.

Thales, for its part, has always been the go-to for preventative data security. Their specialty: encryption, key management, and those critical Hardware Security Modules (HSMs) that lock down cryptographic keys. Steven Maes from Thales confirmed this focus. Imperva, though, played a different game. They were all about catching and responding to application-level threats. Now, these two distinct strengths are merging. The goal? A single platform that secures everything, from the moment someone accesses a system to how sensitive data gets handled.

Catching the Sneaky Stuff: Advanced Threat Capabilities

This new integrated security platform isn’t just bolting old tools together. It’s built to take on today’s nastiest cyber threats. Thales’s Shailes Nanda cut right to the chase on API security. It’s more than just a quick check for technical holes, he said. Much more. The platform digs deep, scrutinizing API calls for odd business logic or shady payloads. Even if they look fine on the surface. “It is not enough to just check for technical vulnerabilities,” Nanda warned. “Cybercriminals know how APIs work and bypass the business logic behind applications.” That’s why the system flags anything that deviates from the norm.

Imperva’s analytics truly shine here, powered by AI and machine learning. They crunch billions of data points, building a dynamic picture of normal user behavior. This lets them spot anomalies fast. Shailes Nanda shared a startling example. Imperva’s system took 10,000 daily alerts from a typical Security Information and Event Management (SIEM) solution. It then whittled them down to just 65 actually relevant incidents. What did it find? A critical incident where an external employee quietly exported 915,000 records. The original SIEM? It missed it entirely. That’s the difference contextual analysis makes.

It doesn’t stop there. The platform delivers serious bot protection, a crucial shield against relentless automated internet traffic. We’re talking credential stuffing and brutal account takeover attempts. Imperva’s own Bad Bot Report reveals a stark truth: a staggering 51% of all internet traffic consists of automated requests. Plus, there’s built-in Distributed Denial of Service (DDoS) mitigation to weather those massive denial-of-service attacks. The infrastructure is global, too, with over 60 points of presence worldwide. This acts as a Tier-1 internet connector, vetting traffic before it even touches a company’s network.

Real-World Impact: A Stronger Security Posture

So, what does all this mean for an organization’s security posture? This integration finally closes the gap between data and application security. It gives teams a single, unified lens on all their risks. One huge win is slashing alert fatigue in Security Operations Centers (SOCs). Imagine analysts focusing only on real critical incidents, not sifting through thousands of false positives. This system’s enhanced threat detection catches the truly sophisticated attacks. It spots those subtle behavioral anomalies and exploited business logic that old rule-based tools just can’t see.

This isn’t about simply ticking compliance boxes like AVG or NIS2 anymore. No. This pushes companies toward a truly proactive, risk-based security strategy. Steven Maes from Thales put it bluntly: “real security goes further” than mere compliance. The platform even helps optimize existing security tools. It beefs up SIEMs and identity management systems by injecting much-needed context and intelligence. That’s the real game-changer here, as both Maes and Nanda highlighted. It’s all about “context and intelligence that is added to existing data streams.”