Wallarm
Web and SaaS
web application firewall
SHOW HN2016
95points
84comments
#400of 2,264 in 2016
Top 18%of 2016 by points
How HN took it
MixedNo clear lean
12 positive, 25 neutral or asking, 2 mixed, 16 critical, out of 55 comments about the project. Thread score -0.40.
Idea: 6 for, 4 againstPricing: 1 for, 5 againstExecution: 2 for, 3 againstDesign: 1 for, 2 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Easy integration via nginx package
From 1 comment
I really like this idea and I've started using Wallarm. - Integration is amazingly easy if you use nginx... basically an apt-get. - Unlike most security packages that just block…
nick007 on HN
Parses XML and WebSocket traffic that other WAFs miss
From 1 comment
Just a few examples of the attacks that other security products can't catch. 1. A very complicated things going through XML/JSON APIs. Wallarm really parse XML, understand the…
hkr_mag on HN
Objections
Black box with no concrete attack examples or explanation of how it works
From 3 comments
TLDR: proxy your traffic through a locally installed secret blackbox, after which it is "100% protected". Not found on the website: non-buzzwordy description of how this really…
idank on HNWhat do you mean "come up"? You made a commercial product and don't have a single use case or user story to pitch?
elmigranto on HNNormally the person showing off something with Show HN also comes into the comments but I haven't seen anything. Is this yours, hkr_mag? Even one of your competitors showed up in…
BinaryIdiot on HN
Pricing is high for what is shown
From 3 comments
A security company citing another security company blog to describe a vulnerability. I <3 it! -- BTW, in order to use Wallarm one needs to pay upwards of $1000 pm. In order to…
0xmohit on HNFor that money you can get IBM datapower. Which is an all in one very powerful solution... With near wire speed transfer. I don't know why I should get that?
Bombthecat on HNOnly $1000/month/node! What a bargain. :)
pbarnes_1 on HN
Security team members use personal email on version control
From 1 comment
A security company where most of the employees uses their personal emails on the VCS, I'm sure that'll be just great when one of your employees reuses passwords (which they do)…
ryanlol on HN
Site has registration and password UX issues
From 1 comment
Normally the person showing off something with Show HN also comes into the comments but I haven't seen anything. Is this yours, hkr_mag? Even one of your competitors showed up in…
BinaryIdiot on HN
Requests
Open-source the node code
From 2 comments
> It's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes Why not open-source it then? In that event tt wouldn't be termed a…
0xmohit on HN# Why it's different 1. Vulnerability and data breach detection. Regular WAF just detects attacks. Thousands of attacks. And what to do with this knowledge? In a case of a…
hkr_mag on HN
Concrete attack examples and use cases
From 2 comments
What do you mean "come up"? You made a commercial product and don't have a single use case or user story to pitch?
elmigranto on HNTLDR: proxy your traffic through a locally installed secret blackbox, after which it is "100% protected". Not found on the website: non-buzzwordy description of how this really…
idank on HN
Questions
How does it differ from Signal Sciences
From 1 comment
Sounds really similar to Signal Sciences ( https://signalsciences.com/ ), down to implementation-level things as well. hkr_mag or others, what differentiates Wallarm?
philsnow on HN
What is the Wallarm Cloud and how is data stored
From 1 comment
Normally the person showing off something with Show HN also comes into the comments but I haven't seen anything. Is this yours, hkr_mag? Even one of your competitors showed up in…
BinaryIdiot on HN
Why not open-source the code
From 1 comment
> It's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes Why not open-source it then? In that event tt wouldn't be termed a…
0xmohit on HN
Alternatives named
ModSecurity
From 1 comment
http://modsecurity.org/ is an open source option with free and commercial rules. I remember reading that CloudFlare used ModSecurity at one point and then moved to their own WAF.
avtar on HN
NAXSI
From 1 comment
One may also want to see NAXSI [0]. NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX. [0] https://github.com/nbs-system/naxsi
0xmohit on HN
Signal Sciences
From 1 comment
Sounds really similar to Signal Sciences ( https://signalsciences.com/ ), down to implementation-level things as well. hkr_mag or others, what differentiates Wallarm?
philsnow on HN
VeryNginx
From 1 comment
Looks very inspired by VeryNgix extension Same features but open source [0] [0] https://github.com/alexazhou/VeryNginx Demo dashboard: http://alexazhou.xyz/vn/index.html# User:…
nwrk on HN
IBM DataPower
From 1 comment
For that money you can get IBM datapower. Which is an all in one very powerful solution... With near wire speed transfer. I don't know why I should get that?
Bombthecat on HN