open-appsec
openappsec.io
Spec sheet
- Purpose
- open-appsec is an open-source web application and API security solution powered by machine learning that analyzes HTTP/S requests and blocks malicious activity.Read 11 Oct 2026 · docs.openappsec.io
- Deployment
- The agent can be deployed on Kubernetes, Linux, or Docker, integrated with supported web servers and gateways.Read 11 Oct 2026 · docs.openappsec.io
- Integrations
- The maker documents integrations including NGINX, NGINX Ingress, Kong, APISIX, Envoy, Istio, NGINX Proxy Manager, NPMplus, and Docker SWAG.Read 11 Oct 2026 · docs.openappsec.io
- Support
- The support page directs users to troubleshooting and a form, and asks them to submit diagnostic information through a secure channel if an issue remains unresolved.Read 11 Oct 2026 · openappsec.io
- Maker
- The open-appsec site identifies Check Point Software Technologies Ltd. as its operator.Read 11 Oct 2026 · openappsec.io
- API security
- API protection can block malicious payloads in all editions, while OpenAPI schema enforcement is a Premium feature.Read 11 Oct 2026 · docs.openappsec.io
- Configuration
- The product supports declarative management using Helm, Kubernetes annotations, Terraform, and a GraphQL API.Read 11 Oct 2026 · openappsec.io
- Local inspection
- Security processing is performed locally, so sensitive data stays within the protected environment and traffic processing does not depend on third-party uptime.Read 11 Oct 2026 · docs.openappsec.io
- Premium features
- The maker lists anti-bot protection, file security, and IPS protection for more than 2,800 web CVEs as Premium Edition features.Read 11 Oct 2026 · docs.openappsec.io
- Premium pricing limits
- The pricing page lists monthly request allowances and extra-request charges for its yearly, quarterly, and monthly Premium subscriptions.Read 11 Oct 2026 · openappsec.io
- Rate limiting
- Community Edition rate limiting can use IP addresses; Premium Edition can also use keys in JWTs, cookies, or headers.Read 11 Oct 2026 · docs.openappsec.io
- Secure communication
- The maker says agents communicate with its Fog service over encrypted HTTP/TLS on port 443, with OAuth 2.0 authentication and a 256-bit key for one-time registration.Read 11 Oct 2026 · docs.openappsec.io
- WAF protection
- Its machine-learning WAF aims to protect against OWASP Top 10 and zero-day attacks without requiring threat signature updates.Read 11 Oct 2026 · openappsec.io
Plans and prices
Premium Edition — Quarterly subscription $99 a month 297 USD quarterly payment 5M requests/month · additional requests: 6 USD for each 1M requests/month Read 11 Oct 2026 · openappsec.io
Premium Edition — Monthly subscription $109 a month 1M requests/month · additional requests: 7 USD for each 1M requests/month Read 11 Oct 2026 · openappsec.io
Premium Edition — Yearly subscription $948 a year 948 USD yearly payment 10M requests/month · additional requests: 5 USD for each 1M requests/month Read 11 Oct 2026 · openappsec.io
Where Specifiction places it
- Web Security Software#11 of 297.3
- Web Application Firewall Software#19 of 357.3