Isn't show HN meant for personal projects rather than companies?
I also like personal projects as Show HW here. But we talked to the guys from YC. And it turned out, show HN works for all projects which can be interesting for HN community.
Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
41–50 of 90 posts
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#42One may also want to see NAXSI [0]. NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX. [0] https://github.com/nbs-system/naxsi
NAXSI is a great tool to use! Always recommend it for companies who want to use only opensource and like NGINX. BTW, Thibault Koechlin, author of naxsi, is at Wallarm advisory board.
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#43One may also want to see NAXSI [0]. NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX. [0] https://github.com/nbs-system/naxsi
I see the primary 'Advisor' to Wallarm is the primary author of Naxsi, so perhaps this is a commercialization of the Naxsi firewall product.
Glad you noticed it! Thibault Koechlin is a valuable advisor who shares his feedback about the product. Also, we'll hopefully give some talks at hacker conference soon.
But naxsi and wallarm are too different products; they still have something in common though (using of nginx e.g.)
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#44MVP it may be, but taking pictures of your screen with a camera creates horrible artifacts. Why not use screenshots for your banner images ?
Chdir thanks! We were OK with the artifacts. But it turned out some people don't like them at all. Will work it out!
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#45Only $1000/month/node! What a bargain. :)
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#46I have never heard someone pronounce nginx "n-jinks" before like they did in their video. It's a minor thing, but it hurts their credibility in my eyes.
Doh! Good catch! I thought we figured it out!
Sorry for that. We're not native speakers. The thing is that "n-jinks" is how Russian NGINX team pronounce it. X is pronounced as iks, not ex, in Russian.
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#47Wallarm looks like a fairly good WAF, and focused on developers / DevOps. We ( https://www.tinfoilsecurity.com ) have the same focus, but are focused on helping you find and fix the vulnerabilities rather than cloaking them / trying to catch them being exploited in real-time. "Detect anomalies and block attacks with no latency" seems hard to believe - minimal latency, maybe, but none? On the other hand, good luck to…
Borski — thanks for sharing this! I heard once about Tinfoil Security at BlackHat last year. Are in touch with the guys? We'd like to talk more with them.
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#48Isn't show HN meant for personal projects rather than companies?
Many personal projects turn into companies. I think it's for anyone in the HN community to show off what they're working on.
Granted this came off a little spammy, in my opinion, because it was submitted and then no founders or employees showed up until a couple of hours later which makes it okay to me but if they wouldn't have shown up I don't think it would be appropriate.
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#49TLDR: proxy your traffic through a locally installed secret blackbox, after which it is "100% protected". Not found on the website: non-buzzwordy description of how this really works and what makes it better than the other gazillion security products. Show me an example of an attack you stopped. I realize the website isn't selling to engineers, but still.
Yeah! We would say the same if someone propose us to use this :)
1. We share the source code of Wallarm Node (nginx-based filter instance) with the companies after signing NDA. 2. Will run 3rd party audit of the code and share the report. 3. At some point, we'll open-source it.
Ivan (wlrm) will come up with the examples of attacks soon.
Re: Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances
#50Normally the person showing off something with Show HN also comes into the comments but I haven't seen anything. Is this yours, hkr_mag? Even one of your competitors showed up in the comments... Some feedback (edited to add stuff twice): - The pricing is confusing. The front page shows me how to install it and run but then another page mentions a free trial? Is that's what I'm doing when I install via apt-get or run…
BinaryIdiot — thanks for a great feedback! I'll answer in several posts.
# What's Wallarm Cloud?
A very good question! We can't run machine-learning stuff on the Nodes as it is performance consuming thing. But we can get all the metrics from all the node (some of our customers have 300+ of them) and craft blocking rules in our cloud. We don't get data; we analyze only statistics. So, we don't have sensitive data. Also, it's possible to deploy a standalone version of Wallarm Cloud.
Here's how it works: 1. All web traffic is proxied through Wallarm Nodes which instantly block any malicious/abnormal request preventing it reaching the application. 2. To get rid of false positives and for better protection, Wallarm Nodes like New Relic agents share application metrics in exchange for an updated blocking ruleset. Wallarm Cloud crafts application profile, its structure, normal user behaviour—and updates corresponding blocking rules every 15 minutes using machine learning. Updated blocking rules are distributed among all the Wallarm Nodes. 3. A built-in vulnerability scanner discovers security flaws in an application and checks the actual severity of each payload detected in attacks (is it targeting existing vulnerability?) allowing to prioritize company defensive efforts.
The only case when we're receiving the data from the request when we detect a malicious request. We need this request to show analytics in the user interface and get a payload to check if it's targeting vulnerability. To avoid situations when we get sensitive data with attacks details, it's possible to configure Wallarm Node to cut all the data from sensitive fields (cookies, password, SSNs, etc.). We have companies with HIPAA certificates.