Barracuda Application Protection
Protect all your web apps and APIs with one comprehensive platform.
Protect Every Web App and API
Barracuda Web Application Firewall blocks an ever-expanding list of sophisticated web-based intrusions and attacks that target the applications hosted on web servers and the sensitive or confidential data to which they have access.
Placed between the Internet and web servers, it scans all inbound web traffic to block attacks, and scans outbound traffic to provide highly effective data loss prevention. Its comprehensive feature set, versatile deployment options, and ease of use let you automate many application security tasks, whether your web infrastructure lives on-site, in a virtualized environment, or in the cloud.
- Comprehensive inbound attack protection including the OWASP Top 10
- Protection against Application DDoS attacks
- Identity-based user access control for web applications
- Built-in data loss prevention
- No user-based or module-based licensing
44% of breaches were due to bot attacks.**
40% of data breaches were due to account takeover attacks,* and 39% were due to supply chain attacks.**
* Verizon DBIR 2022** The state of application security in 2021
Application security made simple.
Deploy and configure quickly and easily—no steep learning curve or complicated certifications to obtain.
Agile friendly, DevOps ready.
Develop and deploy new or updated apps fast, thanks to its full Rest API.
Cloud native for modern workloads.
Seamlessly integrates with cloud-native services to provide security, control, and peace of mind.
Why Choose Barracuda Web Application Firewall
Every Barracuda Web Application Firewall combines signature-based policies and positive security with robust anomaly detection to defeat today’s most sophisticated attacks.
Protection from web attacks and DDoS
Defends applications, APIs, and mobile app backends against the OWASP Top 10, zero-day threats, data leakage, and application-layer DoS attacks.
Stop bad bots dead in their tracks
Advanced Bot Protection uses machine learning to spot and block bad bots and human-mimicking bots, while legitimate human and bot traffic proceeds with minimal impact.
Protect your APIs and mobile apps
XML and JSON protection secure REST APIs and API-based applications, and API Discovery builds the required rulesets from your API definition files.
Granular access control
Integrates with AD, LDAP, and RADIUS, supports SAML single sign-on, and adds two-factor authentication through RSA SecureID, Duo, and others.
Automate and orchestrate security
A full-featured REST API built on OpenAPI integrates with Puppet, Chef, Ansible, Terraform, Azure ARM, AWS CloudFormation, and more.
Deep visibility into attacks
A detailed dashboard turns traffic and attack data into actionable insights, with support for SIEMs such as Azure Sentinel, IBM QRadar, and Splunk.
Find the Right Web Application Firewall
Choose a hardware appliance for your own rack, or a virtual (Vx) appliance for your virtualized environment. Select a model to see current pricing.
Compare Deployment Options
Run Barracuda application security on a dedicated appliance, in your own virtualized environment, or as a cloud service.
Hardware Appliances
- Models: 360, 460, 660, 860, 960, 964
- Backend Servers: 1 to 300
- Throughput: 25 Mbps to 5 Gbps
- Concurrent Connections: Up to 1,800,000
Virtual Appliances (Vx)
- Models: 360Vx to 960Vx
- Backend Servers: 1 to 300
- Throughput: 25 Mbps to 5 Gbps
- CPU Cores Supported: 2 to 12
Application Protection Plans
- Deployment: SaaS service or WAF containers
- Coverage: East-West and North-South
- Onboarding: Three steps, pre-built policies
- Scale: Any size of application
Not Sure Which Firewall Fits?
Tell us how many backend servers and how much traffic you need to protect, and a Barracuda specialist will size the right appliance or plan for you.
Barracuda Application Protection Plans
Comprehensive web application and API protection for your apps everywhere.
Barracuda Application Protection provides comprehensive, easy-to-use application security for your publicly hosted apps everywhere. With a simple three-step onboarding process and pre-built security policies, you can start protecting your apps with machine learning-backed security within minutes. Massively scalable and globally available, Barracuda Application Protection can secure any size of application.
Barracuda Application Protection can be deployed as a SaaS service or as WAF containers within your application deployments, providing both East-West and North-South protection. Barracuda Application Protection runs on over 60 PoPs worldwide. Deploy your application on the PoP nearest to you to gain comprehensive protection without introducing any application latency. Applications can be deployed on multiple PoPs for redundancy and other needs.
Learn More
Barracuda Cloud Security Guardian
Cloud Security Guardian
Barracuda Security Guardian is a comprehensive software platform for public-cloud security and compliance orchestration. It continually scans your infrastructure to detect misconfigurations, actively enforces security best practices, and remediates violations automatically before they become risks.
Barracuda Cloud Security Guardian watches over your security and compliance, so your developers can focus on what they do best—building great business applications.
Learn MoreFrequently Asked Questions
It protects applications, APIs, and mobile app backends against a variety of attacks including the OWASP Top 10, zero-day threats, data leakage, and application-layer denial of service (DoS) attacks. Advanced Bot Protection uses machine learning to spot and block bad bots and human-mimicking bots while allowing legitimate human and bot traffic through.
Both cover the same range, from 1-5 backend servers at 25 Mbps on the 360 up to 150-300 backend servers at 5 Gbps on the 960. Choose a hardware appliance for a dedicated unit in your own rack; choose a Vx appliance to run the firewall in your virtualized environment, sized by the CPU cores it supports (2 to 12).
Barracuda Application Protection is an integrated platform that combines full Web Application and API Protection (WAAP) with advanced security services. It can be deployed as a SaaS service or as WAF containers within your application deployments, and a three-step onboarding process with pre-built security policies gets your apps protected within minutes.
Yes. Barracuda Web Application Firewall protects XML and JSON REST APIs against all application attacks, including OWASP Top 10 API threats. API Discovery uses your API definition files to automatically create the required rulesets, reducing admin overhead.
A software platform for public-cloud security and compliance orchestration. It continually scans your infrastructure to detect misconfigurations, actively enforces security best practices, and remediates violations automatically before they become risks.
Each model page lists current pricing for the appliance and its subscription bundles. Select a model on this page, or call a BarraGuard specialist at 800-878-6893 for a quote.