AppSecNews

RASP

Runtime Application Self-Protection

Detect and block attacks from inside the running application process.

9 tools profiled

How it differs Runs inside the production app and blocks attacks as they happen. IAST finds bugs with similar instrumentation during testing; a WAF filters traffic in front of the app rather than inside it.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

5 tools match

Active Splunk Clear all

  • Imperva RASP

    Imperva

    RASP

    An in-application agent that parses payloads in their execution context using language grammars, blocking injection attacks without signatures, tuning or traffic learning.

    Commercial
    Established

  • K2 Cyber Security

    New Relic

    RASP

    A runtime protection agent that models an application's expected execution flow and flags deviations, detecting injection and memory attacks without signatures; technology now part of New Relic.

    Commercial
    Growing

  • Oligo Security

    Oligo Security

    RASP

    Uses eBPF sensors to observe how application libraries actually behave at runtime, profiling normal activity to flag deviation and to show which vulnerable dependencies are genuinely in use.

    Commercial
    Emerging

  • Signal Sciences

    Fastly

    RASP

    A next-generation WAF using in-path agents and modules that tag requests with attack signals locally and block sources once they cross a threshold, rather than dropping on a single pattern match.

    Commercial
    Established

  • Waratek

    Waratek

    RASP

    Java-focused runtime protection that applies rule-driven fixes inside the JVM, letting teams neutralize known vulnerabilities without changing source code or rebuilding the application.

    Commercial
    Established

  • Imperva RASP

    Imperva

    An in-application agent that parses payloads in their execution context using language grammars, blocking injection attacks without signatures, tuning or traffic learning.

    Commercial Established
    RASP

  • K2 Cyber Security

    New Relic

    A runtime protection agent that models an application's expected execution flow and flags deviations, detecting injection and memory attacks without signatures; technology now part of New Relic.

    Commercial Growing
    RASP

  • Oligo Security

    Oligo Security

    Uses eBPF sensors to observe how application libraries actually behave at runtime, profiling normal activity to flag deviation and to show which vulnerable dependencies are genuinely in use.

    Commercial Emerging
    RASP

  • Signal Sciences

    Fastly

    A next-generation WAF using in-path agents and modules that tag requests with attack signals locally and block sources once they cross a threshold, rather than dropping on a single pattern match.

    Commercial Established
    RASP

  • Waratek

    Waratek

    Java-focused runtime protection that applies rule-driven fixes inside the JVM, letting teams neutralize known vulnerabilities without changing source code or rebuilding the application.

    Commercial Established
    RASP
Tick up to 4 tools above.