Imperva
Bot management and traffic analytics for high-traffic publisher sites
Best for mid-market and enterprise publishers.
Summary review · Last verified Nov 12, 2026 · Scored on 11 criteria · Vendors can't pay for scores
Research by Vahe Arabian · Scored and edited by the SODP team
Key facts
- Score
- 2.2 / 5
- Tier
- Limited
- Pricing model
- Enterprise pricing on request.
- Type
- Bot & crawler analytics
- Publishers using it
- 3
- HQ
- Austin, United States
- Headcount
- 1,242
At a glance
- Imperva scores 2.2/5 (Limited) in Benchmark Grid's independent bot & AI crawler analytics benchmark, assessed on 11 published criteria.
- It is built for mid-market and enterprise publishers.
- Strongest on Crawler Identification & Classification (4.6) and Technical Performance & Scale (4.4); weakest on Publisher-Specific Reporting (1.5).
- Pricing: Enterprise pricing on request.
- 3 publishers in our tracking use Imperva, from ads.txt files, page code and public case studies.
- Scores last verified 12 Nov 2026. Vendors cannot pay for a score or a position.
Summary
Editor's update: 19 Oct 2026 accuracy audit: credited TollBit integration (Dec 2025); removed unsupported AI-crawler reporting claim; Thales ownership noted.
Imperva’s bot management suite, now part of Thales, classifies automated traffic, reports on bot composition by type and applies mitigation rules across the OWASP automated threats, including scraping and account abuse.
Score breakdown
2.2 = 0.45 × 3.38 capability + 0.40 × 1.00 publisher fit + 0.15 × 1.60 cost
Σ (criterion rating × weight) across 11 criteria · scale 1 (poor) → 5 (excellent)
The platform offers mature, well-documented bot detection and advanced signature analysis.
11% of capability · What we check: The tool accurately labels incoming requests by distinguishing between beneficial search bots, malicious scrapers, and specific AI training crawlers.
Provides comprehensive traffic analytics and bot composition reporting for high-traffic environments.
11% of capability · What we check: The dashboard displays all incoming bot traffic across the entire web property without excluding any domains or subdirectories.
Customisable dashboards and reports cover bot traffic, but the product page describes no AI-crawler-specific reporting.
10% of capability · What we check: The system provides specific data regarding which AI models or companies are accessing content and the volume of requests.
Robust rule-based controls allow for effective mitigation of scraping and account abuse.
10% of capability · What we check: Administrators can block or allow specific bots from accessing sensitive content via granular rules or automated policy settings.
TollBit integration (Dec 2025) lets Cloud WAF customers redirect AI bots to a TollBit paywall that returns HTTP 402 until the bot pays.
10% of capability · What we check: The platform tracks usage data required to facilitate financial agreements or licensing deals between publishers and AI companies.
Dashboards focus on security and bot threats rather than publisher-centric metrics like content value.
9% of capability · What we check: The tool generates clear summaries showing how AI traffic impacts the publisher’s unique content library and specific business metrics.
Provides standard reporting dashboards and APIs for data access and integration.
9% of capability · What we check: Users can programmatically pull raw log data or aggregated analytics reports into external business intelligence tools via APIs.
Engineered specifically to handle the performance demands of high-traffic enterprise sites.
9% of capability · What we check: The solution processes high volumes of incoming traffic logs without causing latency or downtime on the publisher's main website.
Solid ability to distinguish and manage various bot types, including common search crawlers.
8% of capability · What we check: The software allows users to manage and optimize how common search engines index site content versus unauthorized third-party crawlers.
Adheres to standard enterprise security compliance requirements common in large-scale deployments.
7% of capability · What we check: The platform ensures all tracking activities adhere to global data protection regulations like GDPR and CCPA regarding visitor information.
Implementation requires significant enterprise-level overhead and professional services.
6% of capability · What we check: The system achieves full operational status and provides actionable insights within one business day of initial installation.
Imperva scores 2.2/5 in Benchmark Grid's independent Best Bot & AI Crawler Analytics for Publishers benchmark (benchmarkgrid.com/best-bot-ai-crawler-analytics-for-publishers/imperva, verified Nov 12, 2026)
Strengths & limitations
Strengths
- Mature, well-documented bot detection
- Combines content protection with broader application security
Limitations
- AI traffic monetisation requires a separate TollBit setup
- Enterprise contracts and implementation overhead
Who uses it
Detected from site code, ads.txt records and published case studies — not from the vendor's own customer list.
By publisher size
By content vertical
Publishers running Imperva3
- Sud OuestEnterprise· News
- Karger PublishersMid-market· Health & Fitness
- Zacks Investment ResearchMid-market· Personal Finance
Cost of ownership
Pricing
Enterprise pricing on request.
Pricing unclear for your setup? — we'll make the introduction. Free, and it never affects the score.
Cost data sourced from vendor pricing pages and community signals. Vendors may dispute any factor.
What users say
Users report mixed experiences, noting Imperva's effectiveness in regulated sectors and threat intelligence, while frequently citing issues with false positives, bot-blocking errors, and difficulties during service migration.
Sources: Reddit 83% · X 10% · Blog 4% · G2 2% · Podcast 2%
Most discussed
Recent quotes
"The customer service is absolutely horrible. ... Such a terrible company. Usually when I experience such nightmare service, after a few back and forth interactions I understand that the only thing I can do is leave and move to another company."
Negative·Blog·via Gartner
"Year 2017. We stumbled upon an "annual bot traffic report" by folks from Incapsula (now Imperva). According to that report, Ahrefs had the second most active crawler after Google. This was HUGE for us!!"
Positive·X·via Ahrefs
"path clean for ten hops and falling apart at the first Imperva hop."
Negative·Reddit·1mo ago
"The app is using Imperva WAF, however that feature allowed me to bypass it"
Negative·X
"when I try to send the same request through Imperva’s public CDN/WAF IP addresses, the request is not being routed to my Origin."
Negative·Reddit·1mo ago
52 mentions from 5 independent sources, each read and scored by our analyser. Mentions we could not tie to a real user, and those flagged as promotional, are excluded. Sentiment is opinion, and is independent of the verified publisher adoptions shown above.
The company behind Imperva
Company facts come from an independent business-data record rather than the vendor's own site.
- Employees
- 1,242
- Headquarters
- Austin, United States
- Ownership
- Privately Held
Compare Imperva
The head-to-heads publishers look at most, then the closest contests in the same benchmark.
FAQ
How is Imperva scored?
Imperva scores 2.2 out of 5 in Benchmark Grid's independent Best Bot & AI Crawler Analytics for Publishers benchmark. The overall figure blends capability (45%), publisher fit (40%) and cost of ownership (15%). Capability is itself a weighted average of 11 criteria; the heaviest are crawler identification & classification (11%), traffic visibility & coverage (11%) and ai traffic reporting & analytics (10%). Vendors cannot pay for a score.
What size publisher is Imperva built for?
Imperva is built for mid-market publishers and enterprise publishers. That is the vendor's own stated target, and it is one of the inputs to our publisher-fit score — a platform that suits a national newsroom often carries more operational load than a small one can absorb.
What does Imperva cost?
Enterprise pricing on request. Our cost-of-ownership score is 1.6/5, which weighs pricing transparency, entry cost, implementation cost, hidden-fee risk and ongoing cost. Ask the vendor for a written first-year figure that includes implementation before you commit.
Who uses Imperva?
We have evidenced 3 publishers running Imperva. Adoptions are detected from site code, ads.txt records and published case studies rather than taken from the vendor's own customer list, and each one is listed on this page.
Can Imperva pay for a better score?
No. Scores come from our editorial review of the product's documentation, demos and public evidence. A vendor can claim this listing or request a re-review, but nothing they buy changes a score or a position.
Verify a claim
Enter a claim about Imperva and our AI will check it against the benchmark data on this page. Claims we have already fact-checked are listed below.
3 verifications remaining
Where to next
Is this your tool? Claim the listing, get your score badge or request a hands-on review. Neither changes the score.
