Myra Application Security

It helps organizations, especially in regulated sectors such as finance, government and healthcare, keep websites, portals and APIs available and protected against DDoS and web attacks, with GDPR-compliant processing in Germany.

Suggest a correction

Overview

Users protect websites, portals and APIs against DDoS, OWASP Top 10 attacks, credential stuffing and bots, and accelerate delivery via CDN, DNS, load balancing, certificate management, object storage and video streaming. Boundaries: it is a cloud service with the customer's DNS or traffic routed to Myra, and TLS is terminated at Myra for inspection.
More product details

Product

Demo Url
myrasecurity.com/en/saasp/application-security/hyperscale-waf
Solution Kind
Suite

Who it is for

Industries
  • Financial services
  • Government
  • Healthcare
Organization Types
  • Business
  • Government

Features

Global Network

Global Points of Presence for caching and delivery

Anycast routing to the nearest or best-performing PoP

More details & conditions: Global Network

IPv4 and IPv6 addressing

SSL/TLS termination exclusively in Germany

Categories: Content Delivery Network

Video Delivery

Adaptive video delivery adjusting to each user's bandwidth and network conditions (Video Streaming module)

Dynamic live stream delivery

Categories: Content Delivery Network

DDoS Protection

Multi-layer layer-7 filtering with fingerprinting, blocklisting and request limiting

GeoIP blocking

Not included
  • Layer 3/4 network DDoS protection is a separate Network DDoS Protection product
More details & conditions: DDoS Protection

Rate limiting

Automatic notification by escalation level

Post-attack reports on duration, type and strength

24/7 upstream monitoring

Categories: Content Delivery Network

Asset Optimization

WebP conversion

On-the-fly image resizing via query string

More details & conditions: Asset Optimization

Customizable caching rules for static and dynamic content

Categories: Content Delivery Network

Load Balancing

Origin load balancing across customer servers in the CDN

Application Load Balancer with Round Robin, IP Hash, least connection and self-defined plans

Categories: Content Delivery Network

Health Monitoring

24/7 upstream monitoring with automatic notification of origin communication issues

Categories: Load Balancing

SSL Offload

SSL/TLS termination at Myra for deep packet inspection

Certificate upload via the Myra API or Myra App

More details & conditions: SSL Offload

Automated, centrally managed SSL/TLS certificates

Optional mTLS client-to-CDN and CDN-to-origin

Categories: Load Balancing

Reverse Proxy

Redundant HTTP/S reverse proxy forwarding valid requests to customer infrastructure after multi-level filtering

Optional mTLS so only the Myra CDN can access the origin

Categories: Load Balancing

Threat Response

Automatic DDoS mitigation in under a second

Notification by predefined escalation levels

More details & conditions: Threat Response

Post-attack reports

WAF block, challenge and rate-limit actions

SOC-assisted DDoS filter configuration

Categories: Website Security

Web-Application Security

Protection against OWASP Top 10 risks such as XSS, CSRF, SQL injection and directory traversal

Standard Myra Tags rules and custom rules

More details & conditions: Web-Application Security

Known zero-day exploit protection

Optional Managed WAF with expert rule creation

Categories: Website Security

Firewalls

Cloud web application firewall with HTTP/S filter rules

Block, allow, challenge, log, header modification and rate limiting actions

More details & conditions: Firewalls

Geo-IP blocking

Categories: Website Security

Log Management

WAF rule log identifiers to track rule hits

CDN access logs and cache logs

More details & conditions: Log Management

Real-time dashboards on traffic and performance

Detailed statistics with granular filtering

Categories: Website Security

Show all details (13)

SQL Injections

SQL injection protection through Myra Tags standard rules and custom WAF rules on HTTP/S requests

Categories: Website Security

Workflow details

Cache behavior
  • Customizable caching rules for static and dynamic content
  • Pure RAM caching
  • Real-time invalidation
  • Stale-object support

Categories: Content Delivery Network

Origins and failover
  • Origin load balancing across customer servers
  • Stale-object support
  • Optional mTLS to the origin
  • 24/7 upstream monitoring with alerts on origin communication issues
  • Object Storage can deliver CDN-stored content when origin servers fail

Categories: Content Delivery Network

Protected and dynamic delivery
  • Signed URLs with cryptographic signature and optional expiration parameters
  • Optional mTLS client-to-CDN and CDN-to-origin
  • TLS 1.2 and 1.3
  • Static and dynamic content acceleration

Categories: Content Delivery Network

Technical details

API

Programmatic access
Yes
Protocols
  • REST

Deployment

Client Channels
  • Browser
  • API
Delivery Models
  • Cloud (SaaS)

Implementation

Delivery Mode
  • Self service
  • Vendor
Typical Duration
Unit
Minutes
Scope
CDN setup: create a domain, upload a TLS certificate, configure the origin and update DNS, without service interruption
Maximum
30
Minimum
30
Estimate kind
Vendor estimate

Security

Assurances
  • Kind
    Certification
    Issuer
    BSI
    Standard
    ISO 27001 based on IT-Grundschutz (certificate BSI-IGZ-0667-2024)
  • Kind
    Attestation
    Standard
    BSI C5 Type 2
  • Kind
    Certification
    Standard
    PCI DSS Level 1 service provider
  • Kind
    Attestation
    Standard
    IDW PS 951 Type 2 (ISAE 3402)
  • Kind
    Certification
    Standard
    ISO 9001
  • Kind
    Certification
    Issuer
    Trusted Cloud e. V.
    Standard
    Trusted Cloud label
Encryption In Transit
Yes

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with Myra Application Security.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights