15 cloud WAAP security providers ranked

SecureIQLab, a provider of cloud security validation solutions, has shared the results of its 2025 Cloud Web Application Firewall and API Protection (WAAP) validation study. 

SecureIQLab, known for its cloud cybersecurity validation, leveraged its proprietary SocX, an AI-powered validation platform, to validate cloud WAAP solutions against the OWASP Top:2023 critical security risks. 

The validation study that was conducted from January through April 2025 attempted to evaluate over 15 leading enterprise-class cloud WAAP providers. The study focused on overall security efficacy use-cases targeted around 15 distinct attack vectors and 1,360 attack techniques. The results also exposed key operational gaps around efficiently deploying and managing these solutions, as highlighted in the 60 or more operational scenarios that were evaluated as a part of the study.

"Today's sophisticated cyberthreats require equally sophisticated defence mechanisms," said David Ellis, VP Corporate Relations & Research at SecureIQLab.

"Our validation methodology sets the standard for how organisations should evaluate their web security posture while leveraging the full capabilities of our SocX AI-powered platform around key OWASP top-10 security risks in today's rapidly evolving threat landscape."

Research highlights included:

- The advanced AI-Powered SocX Platform helped demonstrate a 40% increase in validation efficacy on OWASP Top 10 security risks.

- The average OWASP Top 10 security score was pegged at 89.5%, which was close to ~2% more than the last year.

- Only two of the 11 security vendors tested received SecureIQLab's badge of honour on Secure by Design and Secure by Default.

- The cloud WAAP security vendors had an average security efficacy score of 74.50% and an operational efficiency score of 86.9%.

- Overall OWASP API security scores were significantly lower, with the average being 55.0%.

"While securing enterprise cloud applications, what you don't validate today becomes tomorrow's vulnerability," explained Cameron Camp, Senior Security Researcher at SecureIQLab. 

"Specifically, without comprehensive validation of cloud WAF API security against today's sophisticated threats, businesses risk not only data breaches but damage to customer trust and their bottom line."

Explore

Access SecureIQLab's 2025 Cloud WAAP CyberRisk Ripple at https://secureiqlab.wpcomstaging.com/publications/

Comments

Post a Comment

Popular posts from this blog

Fortinet enhances FortiRecon to align with CTEM framework

Fortinet, the global cybersecurity provider driving the convergence of networking and security, has turned the FortiRecon platform into a comprehensive solution aligned with the continuous threat exposure management (CTEM) framework. The latest release introduces expanded internal attack surface monitoring, adversary-centric dark web intelligence, and security orchestration, all in a unified platform. These enhancements help organisations proactively identify and prioritise real-world exposures, validate risks like an attacker would, and accelerate response. “CISOs and security teams are overwhelmed by growing attack surfaces and an endless stream of unprioritised alerts,” said Nirav Shah, Senior VP of Products and Solutions at Fortinet. “With the latest enhancements to FortiRecon , we’re giving organisations an attacker’s eye view of their internal and external exposures, backed by AI-powered threat intelligence from FortiGuard Labs, real-world validation, and automated response...
Read more

SentinelOne recognised as a 2025 Gartner Peer Insights Customers’ Choice for XDR

SentinelOne, a global provider of AI-powered security, has been named a Customers’ Choice in the 2025 Gartner Peer Insights ‘Voice of the Customer’ for Extended Detection and Response (XDR) report* – one of only two companies with this distinction. A hundred and forty-four users reviewed SentinelOne's Singularity Platform, and 97% said they would recommend the solution to respond to threats across endpoints with AI-powered security, while 97% rated the solution four stars or better.** “With the growing complexity of cyberthreats, organisations need more than siloed security—they need AI-powered, autonomous protection that delivers real-time detection and response across their entire attack surface. Customers have made it clear that SentinelOne’s XDR provides the intelligence, automation, and efficiency they need to stay ahead of threats and secure their environments with confidence,” said Ely Kahn, VP, Product Management, SentinelOne. Gartner defines extended detection and ...
Read more

AWS: AI adoption grows 20% in Singapore

Image
Amazon Web Services (AWS), an Amazon.com company, has found* that AI adoption continues to accelerate in Singapore. In the past year alone, 27,000 1 Singapore businesses adopted AI for the first time—equivalent to over three new adopters every hour. In sum, nearly 170,000 (48%) of businesses in Singapore have adopted AI 2 , up from approximately 143,000 (40%) a year ago. This represents a 20% year-over-year growth rate, AWS said. AI adoption is the strongest in the financial services industry (71%), followed by the technology sector ( software developers, data analytics firms, cloud service providers, and digital startups) at 70%, and healthcare at 63%. Among Singapore’s businesses that have adopted AI, 82% reported an increase in revenue, at an average increase of 19%, while 90% report significant productivity improvements. A large majority (85%) of those who have adopted AI say the technology is likely to increase their growth in the next year, and 89% expect an average of 17%...
Read more