[{"data":1,"prerenderedAt":460},["ShallowReactive",2],{"project-12002485":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":48,"post_text":49,"what":50,"said":92,"maker_in_thread":207,"shape":209,"grid":213,"attempts":421,"same_week":422,"maker_shows":38,"maker_hidden":452,"reader_version":453,"card":454},"12002485","Wallarm","Protect your web apps or APIs with fast Nginx-based instances","title","Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances","https:\u002F\u002Fwallarm.com","wallarm.com","stepan_",1467215712,2016,95,84,400,2264,18,"notable","web_saas","web application firewall","other",[21,24,25,26],"nginx waf","api security","vulnerability scanner","mixed",-0.401,{"positive":30,"neutral":31,"mixed":32,"critical":33},12,25,2,16,55,{"docs":36,"idea":39,"execution":42,"design":44,"pricing":45,"privacy":47},{"positive":37,"critical":38},0,1,{"positive":40,"critical":41},6,4,{"positive":32,"critical":43},3,{"positive":38,"critical":32},{"positive":38,"critical":46},5,{"positive":37,"critical":38},[38,37,46,43,43,43,43,43,38,46,37,43,38,43,43,38,38,46,38,43,38,38,38,43,43,38,37,37,37,37,37,37,37,43,43,43,46,46,37,46],null,{"problem":51,"audience":62,"pricing":66,"motivation":76,"time_to_build":49,"stack":80,"openness":89,"stage":90,"team_size":91},{"value":52,"source":53,"evidence":54},"Protecting web apps and APIs from attacks without constant false positives, and finding exploitable vulnerabilities","commenter",[55,59],{"id":56,"by":57,"text":58},"12005472","hkr_mag","Guys, here is a story of how we got the the idea of Wallarm We started as a team of white hat hackers. Ivan (CEO) is a respected researcher known for his articles and talks at…",{"id":60,"by":57,"text":61},"12005814","# Why it's different 1. Vulnerability and data breach detection. Regular WAF just detects attacks. Thousands of attacks. And what to do with this knowledge? In a case of a…",{"value":63,"source":53,"evidence":64},"DevOps and security teams running frequently deployed web apps and APIs",[65],{"id":56,"by":57,"text":58},{"value":67,"source":53,"evidence":68},"Starts at $1000\u002Fmonth per node; 30-day free pilot",[69,73],{"id":70,"by":71,"text":72},"12002791","csears","Starting at $1000\u002Fmo",{"id":74,"by":57,"text":75},"12006032","Pity you get it in this way. Exploit for WebSphere is just an example of a complicated case with Base64 inside XML where Wallarm can detect malicious request other WAF usually…",{"value":77,"source":53,"evidence":78},"Founders, former security auditors, saw fixes not keeping up with frequent deployments and wanted a product that did that",[79],{"id":56,"by":57,"text":58},[81,85],{"value":82,"source":53,"evidence":83},"Nginx",[84],{"id":60,"by":57,"text":61},{"value":86,"source":53,"evidence":87},"Machine learning",[88],{"id":60,"by":57,"text":61},"unknown","launched","company",{"praise":93,"objections":107,"requests":149,"questions":162,"alternatives":178},[94,101],{"value":95,"source":53,"evidence":96},"Easy integration via nginx package",[97],{"id":98,"by":99,"text":100},"12003033","nick007","I really like this idea and I've started using Wallarm. - Integration is amazingly easy if you use nginx... basically an apt-get. - Unlike most security packages that just block…",{"value":102,"source":53,"evidence":103},"Parses XML and WebSocket traffic that other WAFs miss",[104],{"id":105,"by":57,"text":106},"12004158","Just a few examples of the attacks that other security products can't catch. 1. A very complicated things going through XML\u002FJSON APIs. Wallarm really parse XML, understand the…",[108,123,138,145],{"value":109,"source":53,"evidence":110},"Black box with no concrete attack examples or explanation of how it works",[111,115,119],{"id":112,"by":113,"text":114},"12002778","idank","TLDR: proxy your traffic through a locally installed secret blackbox, after which it is \"100% protected\". Not found on the website: non-buzzwordy description of how this really…",{"id":116,"by":117,"text":118},"12003798","elmigranto","What do you mean \"come up\"? You made a commercial product and don't have a single use case or user story to pitch?",{"id":120,"by":121,"text":122},"12002978","BinaryIdiot","Normally the person showing off something with Show HN also comes into the comments but I haven't seen anything. Is this yours, hkr_mag? Even one of your competitors showed up in…",{"value":124,"source":53,"evidence":125},"Pricing is high for what is shown",[126,130,134],{"id":127,"by":128,"text":129},"12005962","0xmohit","A security company citing another security company blog to describe a vulnerability. I \u003C3 it! -- BTW, in order to use Wallarm one needs to pay upwards of $1000 pm. In order to…",{"id":131,"by":132,"text":133},"12003049","Bombthecat","For that money you can get IBM datapower. Which is an all in one very powerful solution... With near wire speed transfer. I don't know why I should get that?",{"id":135,"by":136,"text":137},"12003513","pbarnes_1","Only $1000\u002Fmonth\u002Fnode! What a bargain. :)",{"value":139,"source":53,"evidence":140},"Security team members use personal email on version control",[141],{"id":142,"by":143,"text":144},"12006010","ryanlol","A security company where most of the employees uses their personal emails on the VCS, I'm sure that'll be just great when one of your employees reuses passwords (which they do)…",{"value":146,"source":53,"evidence":147},"Site has registration and password UX issues",[148],{"id":120,"by":121,"text":122},[150,157],{"value":151,"source":53,"evidence":152},"Open-source the node code",[153,156],{"id":154,"by":128,"text":155},"12006502","> It's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes Why not open-source it then? In that event tt wouldn't be termed a…",{"id":60,"by":57,"text":61},{"value":158,"source":53,"evidence":159},"Concrete attack examples and use cases",[160,161],{"id":116,"by":117,"text":118},{"id":112,"by":113,"text":114},[163,170,174],{"value":164,"source":53,"evidence":165},"How does it differ from Signal Sciences",[166],{"id":167,"by":168,"text":169},"12005799","philsnow","Sounds really similar to Signal Sciences ( https:\u002F\u002Fsignalsciences.com\u002F ), down to implementation-level things as well. hkr_mag or others, what differentiates Wallarm?",{"value":171,"source":53,"evidence":172},"What is the Wallarm Cloud and how is data stored",[173],{"id":120,"by":121,"text":122},{"value":175,"source":53,"evidence":176},"Why not open-source the code",[177],{"id":154,"by":128,"text":155},[179,186,192,196,203],{"value":180,"source":53,"evidence":181},"ModSecurity",[182],{"id":183,"by":184,"text":185},"12002875","avtar","http:\u002F\u002Fmodsecurity.org\u002F is an open source option with free and commercial rules. I remember reading that CloudFlare used ModSecurity at one point and then moved to their own WAF.",{"value":187,"source":53,"evidence":188},"NAXSI",[189],{"id":190,"by":128,"text":191},"12002984","One may also want to see NAXSI [0]. NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX. [0] https:\u002F\u002Fgithub.com\u002Fnbs-system\u002Fnaxsi",{"value":193,"source":53,"evidence":194},"Signal Sciences",[195],{"id":167,"by":168,"text":169},{"value":197,"source":53,"evidence":198},"VeryNginx",[199],{"id":200,"by":201,"text":202},"12018865","nwrk","Looks very inspired by VeryNgix extension Same features but open source [0] [0] https:\u002F\u002Fgithub.com\u002Falexazhou\u002FVeryNginx Demo dashboard: http:\u002F\u002Falexazhou.xyz\u002Fvn\u002Findex.html# User:…",{"value":204,"source":53,"evidence":205},"IBM DataPower",[206],{"id":131,"by":132,"text":133},{"comments":37,"answered":37,"key":208},[],{"commenters":210,"max_depth":40,"maker_replies":37,"first_comment_mins":211,"lifespan_hours":212},36,32,51,[214,216,219,221,224,226,229,232,234,237,239,240,242,246,248,250,252,254,256,260,261,263,265,268,270,272,276,279,283,286,288,291,293,294,296,299,302,305,306,308,310,312,315,317,319,322,325,327,329,332,334,336,339,340,344,347,350,353,355,358,361,363,366,369,371,374,377,379,382,384,387,389,394,395,397,399,402,404,406,411,413,415,418,419],[112,37,38,215,113,37],"project\u002Fcritical\u002Fdocs",[217,37,43,218,57,37],"12003641","maker\u002Fneutral\u002Fnone",[116,37,37,220,117,37],"commenter\u002Fneutral\u002Fnone",[222,37,37,220,223,37],"12005072","liquidise",[225,37,37,220,117,37],"12006317",[227,37,46,228,57,37],"12005615","project\u002Fpositive\u002Fidea",[230,37,38,231,143,37],"12006033","project\u002Fcritical\u002Fidea",[233,37,46,228,57,37],"12006189",[235,37,43,236,128,37],"12005923","project\u002Fneutral\u002Fnone",[238,37,37,220,57,37],"12006237",[154,37,38,231,128,37],[105,37,46,241,57,37],"project\u002Fpositive\u002Fexecution",[243,37,43,244,245,37],"12004737","project\u002Fneutral\u002Fdesign","sz4kerto",[247,37,43,244,57,37],"12004762",[249,37,46,228,57,37],"12005674",[127,37,38,251,128,37],"project\u002Fcritical\u002Fpricing",[74,37,43,253,57,37],"project\u002Fneutral\u002Fpricing",[255,37,38,231,128,37],"12005947",[257,37,43,258,259,37],"12006142","project\u002Fneutral\u002Fexecution","wlrm",[60,37,46,228,57,37],[262,37,46,228,57,37],"12005837",[190,38,37,264,128,37],"other\u002Fneutral\u002Fnone",[266,38,37,264,267,37],"12003292","ddrager",[269,38,43,218,57,37],"12003478",[271,38,37,264,57,37],"12003456",[273,32,38,274,275,37],"12002866","project\u002Fcritical\u002Fdesign","chdir",[277,32,38,274,278,37],"12002907","singlow",[280,32,43,281,282,37],"12002998","project\u002Fmixed\u002Fdesign","niftich",[284,32,43,285,57,37],"12003487","maker\u002Fneutral\u002Fdesign",[56,43,46,287,57,37],"maker\u002Fpositive\u002Fidea",[289,41,38,290,128,37],"12002971","project\u002Fcritical\u002Fexecution",[292,41,43,218,57,37],"12005627",[70,46,38,251,71,37],[295,46,38,251,128,37],"12002836",[297,46,43,236,298,37],"12003029","joshmn",[300,46,46,301,57,37],"12005077","project\u002Fpositive\u002Fdesign",[303,46,46,304,57,37],"12004797","project\u002Fpositive\u002Fpricing",[131,40,38,251,132,37],[307,40,43,236,57,37],"12004750",[309,40,43,236,57,37],"12005634",[311,40,37,264,132,37],"12006724",[167,313,43,314,168,37],7,"project\u002Fneutral\u002Fidea",[316,313,43,314,57,37],"12005870",[200,318,38,231,201,37],8,[142,320,38,321,143,37],9,"maker\u002Fcritical\u002Fprivacy",[323,324,43,218,57,37],"12003423",10,[120,326,38,290,121,37],11,[328,326,38,290,128,37],"12003042",[330,326,43,331,57,37],"12003789","project\u002Fneutral\u002Fprivacy",[333,326,43,258,57,37],"12003842",[335,326,43,218,57,37],"12003866",[337,326,43,338,57,37],"12003880","project\u002Fneutral\u002Fdocs",[135,30,38,251,136,37],[341,342,37,264,343,37],"12002719",13,"jxcl",[345,342,37,264,346,37],"12002731","cmdrfred",[348,342,37,264,349,37],"12002735","j_s",[351,342,37,264,352,37],"12002739","nilved",[354,342,37,264,346,37],"12002750",[356,342,37,264,357,37],"12002743","aroch",[359,342,37,264,360,37],"12003381","throwanem",[362,342,37,220,245,37],"12002766",[364,342,37,220,365,37],"12002832","burkaman",[367,342,37,264,368,37],"12002850","numbsafari",[370,342,37,264,121,37],"12002919",[372,342,37,264,373,37],"12003812","heartsucker",[375,342,37,264,376,37],"12002901","nostrebored",[378,342,37,220,343,37],"12003113",[380,342,37,264,381,37],"12002989","VeejayRampay",[383,342,37,264,360,37],"12003407",[385,342,37,264,386,37],"12003055","realusername",[388,342,43,218,57,37],"12003536",[390,391,43,392,393,37],"12002785",14,"project\u002Fmixed\u002Fidea","borski",[183,391,43,314,184,37],[396,391,43,236,393,37],"12003071",[398,391,43,314,57,37],"12004016",[400,391,46,401,57,37],"12003554","maker\u002Fpositive\u002Fnone",[403,391,43,218,393,37],"12003811",[405,391,46,401,57,37],"12005924",[407,408,37,409,410,37],"12003410",15,"other\u002Fcritical\u002Fnone","bigblind",[412,408,37,264,57,37],"12003438",[414,408,37,264,121,37],"12003572",[416,408,37,264,417,37],"12003944","dang",[98,33,46,241,99,37],[420,33,43,338,121,37],"12003121",[],[423,428,433,437,442,447],{"id":424,"name":425,"points":426,"category":427},"11986480","Anime.js",283,"languages",{"id":429,"name":430,"points":431,"category":432},"12000264","“OK Google”",215,"productivity",{"id":434,"name":435,"points":436,"category":427},"12000893","Monkberry",115,{"id":438,"name":439,"points":440,"category":441},"11958029","still-good-food",92,"learning_science",{"id":443,"name":444,"points":445,"category":446},"11994985","Opsee",79,"infrastructure",{"id":448,"name":449,"points":450,"category":451},"11993451","ping",78,"security_privacy",false,"v2",{"id":455,"name":5,"line":6,"ai":452,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":456,"top":18,"kw":457,"maker":11,"domain":10,"tier":19,"attempts":37,"strip":458,"url":9,"mix":459,"praise":95,"objection":109,"sub":21},12002485,-0.4,[21,24,25,26],"1053333315031331151311133100000003335505",[30,31,32,33],1794036545503]