Vendor, ranked 11 (tied) of 15

Imperva

In short

Imperva, part of Thales, sells Advanced Bot Protection, which grades yes on reporting and partial on agent verification, for 3 of 10 points; per-purpose policy, charging and commerce agents are not published. Neither the Imperva nor the Thales pages read mention verifying a signed agent, and the price is not public.

Application security vendor owned by Thales whose Advanced Bot Protection separates human, good bot and bad bot traffic; agent-specific verified-trust controls exist so far only in a controlled-availability Google Cloud offering. Vendor description of itself, checked against its documents on 2026-11-04.

Alternatives to Imperva · imperva.com

Type: Bot management
Operator: Thales
Homepage: imperva.com
Last read: 2026-11-05

The rubric, with evidence

Question	Grade	What the vendor documents	Evidence
Tells a verified agent from a spoof	Partial	verified trust for verified AI agents in Imperva for Google Cloud (controlled availability); no Web Bot Auth support found (checked 2026-11-04)	Thales-Google blog lists Verified Trust; ABP page names no verification method for agents. Source, read 2026-11-04.
Per-purpose policy (train, search, answer, act)	Not published	per-purpose AI crawler policy (checked 2026-11-04)	ABP page has no AI crawler or training controls. Source, read 2026-11-04.
Charging for access	Not published	support (checked 2026-11-04)	No monetization feature found on ABP page. Source, read 2026-11-04.
Lets signed commerce agents through	Not published	Visa TAP or Mastercard Agent Pay support (checked 2026-11-04)	Not mentioned on ABP page or Thales-Google blog. Source, read 2026-11-04.
Cost	Not graded	no public price; sales-led	ABP page lists no pricing. Source, read 2026-11-04.
Reporting	Yes	customizable dashboards and reports	ABP page claims hundreds of dimensions for dashboards. Source, read 2026-11-04.
Where it runs	Not graded	edge or cloud: Imperva cloud WAF stack, Imperva for AWS and Imperva for Google Cloud	AWS and Google offerings described in Thales sources. Source, read 2026-11-04.

Cost

no public price; sales-led (checked 2026-11-04) Source, read 2026-11-04.

What Imperva does not do

No Web Bot Auth or signed-agent verification found on Imperva or Thales pages read (checked 2026-11-04).
No AI crawler monetization or pay-per-crawl feature found (ABP page).
Agent verified-trust controls are limited to Imperva for Google Cloud and are in Controlled Availability (Thales blog, 2026-05-04).
Imperva's Advanced Bot Protection page names no Web Bot Auth, IP-list or reverse DNS method for verifying AI agents (read 2026-11-05).
Imperva publishes no charging or licensing option for AI crawlers.

Documented facts

Features are as the vendor documents them; we have not tested them. A claim a vendor makes about itself is marked as a vendor claim.

Vendor claim The Advanced Bot Protection page says the product separates human, good bot and bad bot traffic and includes good bot management. Source, read 2026-11-04, dated 2026-10-15.
Primary source The Advanced Bot Protection page describes agentic AI as a new class of automated traffic that behaves like legitimate users but names no AI crawler, agent or Web Bot Auth controls. Source, read 2026-11-04, dated 2026-10-15.
Vendor claim Imperva says ABP offers customizable dashboards and reports built from hundreds of traffic dimensions. Source, read 2026-11-04, dated 2026-10-15.
Primary source Thales and Google partnered on 4 May 2026 to protect traffic through Google's AI Agent Gateway; the agentic controls include real-time visibility, a verified trust option for verified AI agents and agentic browsers, and threat blocking. Source, read 2026-11-04, dated 2026-05-04.
Primary source Those agentic AI controls ship in Imperva for Google Cloud (IGC) and are in Controlled Availability. Source, read 2026-11-04, dated 2026-05-04.
Vendor claim Thales's 2026 Bad Bot Report says bots are 53% of internet traffic and bad bots alone 40%. Source, read 2026-11-04, dated 2026-04-30.
Vendor claim Thales says it blocked 17.2 trillion bad bot requests in 2025. Source, read 2026-11-04, dated 2026-04-30.
Vendor claim Thales observed daily AI-driven bot attacks rise from 2 million to 25 million between 2024 and 2025. Source, read 2026-11-04, dated 2026-04-30.
Secondary source In early August 2026 Thales launched Imperva for AWS on AWS Marketplace, a SaaS bundle that includes Advanced Bot Protection. Source, read 2026-11-04, dated 2026-08-03.

Compared with

Imperva vs Cloudflare: Imperva's verified-trust control for AI agents exists only in Imperva for Google Cloud in Controlled Availability (2026-05-04); Cloudflare's verified bots and signed agents work on every zone.
Imperva vs DataDome: Imperva's product page names agentic AI as a traffic class but lists no AI crawler or agent controls; DataDome documents Web Bot Auth, KYA, IP lists and reverse DNS for agent identification.

What Imperva does for this layer

From the vendor's own pages

Imperva offers a free trial of Advanced Bot Protection from its product page and publishes no price. (imperva.com) The 2026 Bad Bot Report describes a new class of AI-driven fetcher bots that take actions rather than crawl and interact directly with APIs. (cpl.thalesgroup.com, dated 2026-04-30) Thales says Imperva for Google Cloud runs natively inside the Google Cloud environment, so web and API traffic is inspected without leaving Google's infrastructure. (cpl.thalesgroup.com, dated 2026-05-04) Thales lists agent-to-MCP inspection, covering unauthorized tool execution, anomalous tool calls and malicious parameter injection, among the capabilities it plans to deliver in Google's agent gateway ecosystem. (cpl.thalesgroup.com, dated 2026-05-04)

Claims the vendor makes about itself

Imperva's Advanced Bot Protection page says the product covers all OWASP 21 Automated Threats across websites, mobile apps and APIs. (imperva.com) Imperva says it was named a Security Leader in the SecureIQLab 2026 WAAP Report. (imperva.com)

Products and plans

Product	What it does	Price model	From	As of
Advanced Bot Protection	Good bot management, bad bot mitigation, dashboards and reports for websites, mobile apps and APIs.	sales-led, free trial Free trial offered on the product page.	Not published	2026-11-05
Imperva for Google Cloud (IGC)	Application security inside Google Cloud with agentic AI controls (visibility, verified trust, threat blocking); Controlled Availability.	No price recorded

Standards

Standard	Status	Evidence
Web Bot Auth	No statement	No Web Bot Auth or signed-agent statement on the Imperva and Thales pages read 2026-11-05.
Visa Trusted Agent Protocol	No statement	No statement on the pages read 2026-11-05.
Mastercard Agent Pay	No statement	No statement on the pages read 2026-11-05.

Our checks

Check	Result	Method	Date
Homepage fetch	HTTP 200	GET with the crawl user agent after a robots.txt check	2026-11-05

All bot management vendors 23 profiles
The full vendor list 73 profiles in four types
Alternatives to Imperva, a Thales company (Advanced Bot Protection) graded on the rubric

Sources

imperva.com: imperva.com read 2026-11-04
imperva.com: advanced bot protection management read 2026-11-04
cpl.thalesgroup.com: thales google protect ai agent ecosystem read 2026-11-04
cpl.thalesgroup.com: bad bots in the agentic age read 2026-11-04
softprom.com: thales launches imperva for aws to protect applications and apis in the cloud read 2026-11-04

Last reviewed 2026-11-05