Cloud One – Application Security

Detection and protection for modern applications and APIs built on your container, serverless, and other computing platforms

Build
secure applications

Protect applications built on dedicated servers, VMs, containers, cloud workloads, and serverless platforms.

Minimize design and deployment risks, and remove the security maintenance burden by protecting against sophisticated hacks from the inside.

Experience
faster results

Deploy security as code into applications in only 2 minutes with no additional code changes or rules to set up.

Our more modern, simpler approach to securing your web applications prevents vulnerabilities from being exploited in the first place.

Improve
developer productivity

Spend more time delighting your customers with a great application and less time on tedious maintenance caused by coding oversights and weaknesses in dependencies.

Deliver a better experience to your customers, knowing your applications and customer data is secure.

Play Icon for a Video

Video:
Serverless demo
Play Icon for a Video

Video:
Container demo
Application Security

Datasheet:
Application Security
Datasheet icon

Diagram:
Architecture Diagram
  • Java (8 or higher)
  • Python (2.7, 3.4 or higher)
  • NodeJS (10 or higher)
  • PHP (7.0 or higher)
  • .NET coming soon (.NET Framework 4.5.2 or higher, .NET Core 2.0 or higher)
  • Ruby coming soon (2.0.0 or higher)

Develop

Applications with security in mind

Trend Micro Cloud One™ – Application Security delivers an embedded security framework for your web applications and containerized web apps, including Kubernetes and severless functions to easily protect their microservices applications in traditional, cloud, or Kubernetes environments.

Unlike signature-based tools, Application Security secures against code vulnerabilities, data exfiltration on the server, and other common vulnerability attacks at the application level. You can deploy the product across just about any architecture and network topology, ensuring application end users and sensitive data is safe. It automatically hooks into your framework at key points, detecting exploit attempts to immediately prevent hacks and identify vulnerabilities.

  •  

Discover

Threats and vulnerabilities that impact your apps

Get help with prioritization of remediation and protection, anti-malware scanning, and insights into common attacks and malicious user behavior. Gain visibility into web application attacks and detailed diagnostics about attack source and type, attempted exploits, and targeted vulnerabilities. Application Security detects and protects against a wider range of attacks at runtime within your entire application, including:

  • SQL injections
  • Remote command execution 
  • Illegal file access 
  • Malicious file uploads, URL redirects, and payloads
  • And more

Remediate

Critical vulnerabilities introduced through secure coding mistakes and exposed dependencies

Application Security pinpoints web application vulnerabilities down to the line of code. Unlike traditional static and dynamic scanners, it reports only exploitable vulnerabilities, reducing waste and friction in the secure development lifecycle.

Get analysis of all the information for every request made to the application to decide if you should allow it, or take protective measures.

Since all protection takes place inside the application directly, network latency is not a factor, and Application Security runs fast.

Protect

User accounts and integrity of server code

For web application security, time is of the essence, and remediation expertise is often sparse. Upgrading to the more secure versions of application frameworks and fixing web application vulnerabilities takes time – even in an agile development cycle. Application Security prevents exploitation of vulnerabilities in your code with virtually no impact on application performance.

It collects and reports information about the attacker, the exploit attempt, and the code vulnerability. The attack is automatically prevented, and you have the visibility and information to stop it from ever happening again.

Easy install

Our technology is optimized to offer complete detection and protection on every request without impacting application performance.

  • Easy to deploy and use
  • Quick installation – only 2 minutes
  • Minimal onboarding
  • No changes to the web application code
  • Optimized for fully autonomous operation
     

Comprehensive language and framework support

Application Security is the only fully automated, cloud runtime protection solution for Ruby and Python that does not require any changes to the web application code.

(Languages) Java, NodeJS, PHP, Python, .Net (‘soon’ label), Ruby (‘soon’ label) (Platforms) AWS Lambda, AWS Fargate, container and orchestration platforms (Kubernetes and Docker logo)

Other Cloud One services

Application Security is part of Trend Micro Cloud One™, a security services platform for cloud builders, which includes:

Workload Security Runtime protection for workloads (virtual, physical, cloud, and containers)

Container Security Image scanning in your build pipeline

File Storage Security Security for cloud file and object storage services

Network SecurityCloud network layer IPS security

Conformity Cloud security and compliance posture management

Get started with Application Security