Company snapshot

CategoryImpervaOnApp CDN
Statusactiveactive
Founded
Headquarters
Website
Docs

Overview

Imperva provides a cloud-based CDN integrated with its Web Application and API Protection (WAAP) platform, focusing on security and performance. The service includes content caching, load balancing, and global Points of Presence (PoPs) to deliver low-latency web experiences. It offers robust DDoS protection, a Web Application Firewall (WAF), and bot mitigation, making it suitable for enterprises prioritizing security. Imperva serves industries like finance, healthcare, and e-commerce, with clients such as Mediolanum and Vodafone. The company, founded in 2002 and headquartered in San Mateo, California, was acquired by Thales in 2019. Its CDN is part of a broader cybersecurity suite, emphasizing secure content delivery.
OnApp CDN is a federated content delivery network designed for hosting providers, utilizing spare capacity in OnApp Clouds to deliver content globally. It supports HTTP push, pull, and streaming/live streaming, catering to hosting providers and enterprises managing web content delivery. The platform integrates with OnApp Cloud, enabling users to leverage a network of edge servers for improved performance. It is primarily used by service providers and enterprises needing scalable CDN solutions. The service is operational as of August 16, 2025, with recent updates enhancing its reporting capabilities.

Network & Architecture

Imperva operates a global network with PoPs in North America, EMEA, APAC, and LATAM, including data centers in cities like Tokyo, New Delhi, and Miami. The exact number of PoPs is not publicly disclosed, but the network supports traffic rerouting during maintenance to ensure availability. It uses machine learning for dynamic caching and integrates with major peering partners for optimized routing. Regional strengths include North America and EMEA, with ongoing expansions in APAC and LATAM. Maintenance schedules, such as the August 2025 migrations in Hong Kong and Paris, ensure minimal disruption for Cloud WAF customers. Limitations include less transparency on PoP counts compared to competitors like Cloudflare.
OnApp CDN operates a global network of Points of Presence (PoPs) by leveraging spare capacity from OnApp Clouds, though specific PoP counts are not publicly detailed. It uses a federated model, combining edge servers from multiple cloud hosts to ensure broad geographic coverage. The platform supports content delivery across regions including North America, EMEA, APAC, and others, with synchronization between CDN and OnApp Cloud occurring every 20 minutes by default. Regional strengths include flexibility for hosting providers, but limitations may arise from reliance on third-party cloud capacity, potentially affecting consistency in less dense regions.

Feature comparison

FeatureImpervaOnApp CDN
waf
bot_mitigation
ddos
rate_limit
http3_quic
tls13
tiered_cache
origin_shield
instant_purge
stale_while_revalidate
stale_if_error
image_optimization
video_vod
video_live
drm
hls_dash_packaging
websockets
signed_urls
edge_compute
functions
kv_storage
api_first
realtime_logs
log_push
terraform

Legend: ✓ = Supported, ✗ = Not supported, — = Not listed

Pricing

Imperva uses a pay-as-you-go (PAYG) model with enterprise-focused pricing, typically requiring custom quotes. No free tier or public per-GB pricing is available, as plans are tailored for high-security use cases. Volume-based discounts are offered for committed contracts. Pricing details are available at https://www.imperva.com/pricing/. The model suits large organizations but may be cost-prohibitive for smaller businesses.
OnApp CDN primarily targets enterprise clients, with pricing typically based on committed contracts tailored to hosting providers. No public per-GB pricing is disclosed, and there is no free tier or pay-as-you-go (PAYG) option widely advertised. Pricing details are available through direct inquiry with OnApp sales teams. For more information, visit https://www.virtuozzo.com/onapp-cdn/.[](https://www.virtuozzo.com/onapp-cloud-docs/7.0/release-notes-onapp-6-4/OnApp%2520CDN.pdf)

Integrations & DevEx

Imperva provides APIs for configuration and management, supporting an API-first approach. Realtime logs and analytics are accessible via the Imperva Management Portal, with log push for integration into external systems. No public documentation confirms Terraform or specific SDK support, limiting Infrastructure-as-Code (IaC) options. Migration tools are not emphasized, but the platform supports standard CDN configurations. Developers may find the API robust but less flexible for CI/CD pipelines compared to Fastly or Akamai.
OnApp CDN offers API-first integration for managing CDN resources, with documentation available at https://docs.onapp.com/cdn/. Real-time logs support monitoring, but there is no public evidence of Terraform support, SDKs, or specific CI/CD integrations. The platform includes tools for managing CDN resources within the OnApp Control Panel, with recent UI updates enhancing usability. Migration tools or import capabilities are not explicitly documented.

When it fits

  • Enterprises needing a CDN with strong security features like WAF and DDoS protection.
  • Businesses in regulated industries (e.g., finance, healthcare) requiring robust compliance and bot mitigation.
  • Organizations with global audiences benefiting from Imperva’s PoP distribution and low-latency delivery.
  • Hosting providers needing a federated CDN integrated with OnApp Cloud for scalable content delivery.
  • Enterprises requiring video VOD and live streaming with global reach through a network of edge servers.
  • Users prioritizing API-driven management and real-time logging for CDN operations.

When it doesn’t

  • Small businesses or startups seeking cost-effective, free-tier, or transparent pricing models.
  • Developers needing extensive IaC support, such as Terraform or advanced CI/CD integrations.
  • Companies focused on edge compute or serverless functions, which Imperva does not currently offer.
  • Small businesses or startups seeking pay-as-you-go pricing or free tiers, which OnApp CDN does not offer.
  • Organizations needing advanced security features like WAF, DDoS protection, or bot mitigation, which are not documented.
  • Users requiring edge compute, image optimization, or specific protocol support like HTTP/3, which are unsupported.

History & Notes