Sold by: Penta Security
Deployed on AWS
Vendor Insights
Cloudbric Managed Rules for AWS WAF - Tor IP Protection provides security against Anonymous IP traffic, specifically originating from Tor network, which can be difficult to detect using an ordinary IP Risk Index.
Overview
Cloudbric Managed Rules for AWS WAF - Tor IP Protection was created to protect the websites and web applications against the threats from Anonymous IPs, specifically IPs from Tor network.
Tor IP Protection utilizes a list of malicious Tor IPs, managed and updated regularly by Cloudbric Labs, to detect and respond to IPs originating from Tor Browsers. These IPs can be difficult to detect using an ordinary IP Risk index because the traffic originating from Tor Browsers stays anonymous by relaying through 3 random servers (relays).
Cloudbric Managed Rules for AWS WAF is created based on the security technologies and expertise of WAPPLES which has protected the web services for enterprises since 2005 and has recently been validated by a third-party testing firm to have a top-tier detection rate. Cloudbric Managed Rules for AWS WAF utilizes Penta Security's own Cyber Threat intelligence (CTI), Cloudbric Labs, to provide a safer online environment.
Interested in trying out the product before committing? Click the 'Request Private Offer' button to contact us. We offer a 14-day free trial so you can explore the product firsthand. Please note that after the free trial period, the private offer will automatically convert to a regular subscription at the standard rate.
Having difficulties managing the rules for your AWS WAF? Cloudbric WAF Managed Service (WMS) provides you with accurate information about the threats and vulnerabilities on your web application in real time, easy-to-use management system and dedicated console, and rule optimization from our security experts so that you can implement a security level best fit for your AWS WAF even if you do not have an expert security knowledge.
AWS Marketplace: https://aws.amazon.com/marketplace/pp/prodview-r4opjncghemnc Cloudbric Website: https://www.cloudbric.com/cloudbric-wms/
Highlights
- Provides web security against the malicious Tor IP traffic.
- Top-tier detection rate validated by a third-party testing firm.
- Regularly managed and updated by Cloudbric Labs.
Details
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
Security credentials achieved
(1)
ISO27001
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/unit |
|---|---|
Charge per month in each available region (pro-rated by the hour) | $20.00 |
Charge per million requests in each available region | $0.20 |
Vendor refund policy
Non-Refundable
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
For product-related all inquiries, please contact : awsmkp@pentasecurity.com .
If you are a buyer based in Japan, and need to request a TQI, please contact: jp-sales@pentasecurity.com .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Penta Security
By Cyber Security Cloud Inc.
Top
100
In Media & Entertainment
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Anonymity Network Detection
"Detects and blocks traffic originating from Tor network by identifying anonymous IP addresses relaying through multiple random servers"
Threat Intelligence
"Utilizes proprietary Cyber Threat Intelligence (CTI) from Cloudbric Labs for identifying malicious network traffic"
IP Reputation Management
"Maintains and regularly updates a comprehensive list of malicious Tor IP addresses for real-time threat prevention"
Web Application Security
"Implements advanced rule-based protection mechanism against anonymous network traffic targeting web applications"
Traffic Analysis
"Employs sophisticated detection techniques that go beyond standard IP Risk Index for identifying anonymous network connections"
Web Attack Protection
Comprehensive defense against OWASP Top 10 web vulnerabilities including SQLi, XSS, command injection, No-SQLi injection, path traversal, and predictable resource attacks
Threat Rule Management
Dynamically written, managed, and regularly updated security rules by F5 security specialists to address evolving cyber threats
Rule Application Mechanism
Seamless integration and attachment of security rules to AWS WAF instances for immediate enhanced protection
Vulnerability Coverage
Targeted mitigation of complex web application security risks across multiple attack vectors and exploitation techniques
Security Rule Monitoring
Continuous surveillance and proactive updating of ruleset to ensure ongoing defense against emerging web-based attack methodologies
Web Application Threat Protection
Comprehensive ruleset targeting OWASP Top 10 Web Application Threats with low false-positive rate
Vulnerability Mitigation
Managed rules addressing code injection techniques including SQLi, NoSQLi, OScommandi, XSS, and directory traversal
Technology-Specific Security
Protection against known exploits for web technologies like Apache Struts2, Apache Tomcat, Oracle WebLogic, WordPress, Drupal, and Joomla
Threat Intelligence Integration
Regularly updated rulesets incorporating latest cyber threat intelligence
Compliance Support
Security rules designed to help meet security standards such as PCI-DSS
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
-
-
-
-
-
No security profile
No security profile
Standard contract
No
No
No
Customer reviews
4.5
2 ratings
2 AWS reviews
|
1 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Nguyen
Perfect fit for scanning tor incoming
Reviewed on Apr 14, 2025
Review from a verified AWS customer
Screening Tor traffic is a key security concern for our operations, so we decided it was the right time to add an extra layer to our WAF configuration. When I asked around for a cost-effective yet reliable managed rule set, this one came highly recommended by AI—and it really delivers.
Installation was smooth and straightforward, just a few clicks. We did require some advanced custom settings to ensure smooth operations, and their support team was incredibly helpful, guiding us through the process and even suggesting a few extra options in case we experience traffic spikes.
Pricing is based on region and request volume, which makes it very affordable at the moment. Of course, unexpected situations can arise, but it’s good to know they have flexible offerings ready when needed.
I gave it 4 out of 5 stars only because the advanced settings were a bit confusing at first and I had to reach out for help. But apart from that, everything works flawlessly. Very likely to recommend this to other tech teams.
De Luca
Wish There Was a Bundle for All IP Sets
Reviewed on Mar 31, 2025
Review from a verified AWS customer
I'm already using Anonymous IP and have been pretty happy with the results so far. Recently decided to add the tor Protection as an extra layer since we started seeing more suspicious activity that we assume coming from Tor exit nodes.
Setup was quick and worked well alongside the existing rules. It’s a nice addition if you're looking to tighten access without affecting legit users too much.
One thing I’d love to see is an IP threat bundle—something like a package that includes Anonymous IPs, Tor, and Malicious IPs all in one subscription. It’d be way more convenient than subscribing to each one separately.
Overall, solid rule set for those wanting more control over incoming traffic from anonymized sources.
Lucas M.
Pretty worth it for small business like mine
Reviewed on Mar 14, 2025
Review provided by G2
What do you like best about the product?
The pricing is fair—I only pay what I deserve.
I appreciate the targeted focus on Tor IPs, which adds a charming touch to the service.
Their top tier detection rate looks promising, so I'm willing to give it a shot.
Very easy to integrate into WAF with just few clicks.
Oh and the customer contact was very helpful as well.
So far so good!
I appreciate the targeted focus on Tor IPs, which adds a charming touch to the service.
Their top tier detection rate looks promising, so I'm willing to give it a shot.
Very easy to integrate into WAF with just few clicks.
Oh and the customer contact was very helpful as well.
So far so good!
What do you dislike about the product?
I could not find any at this point.
I hope this fair service continues.
I hope this fair service continues.
What problems is the product solving and how is that benefiting you?
They detect bad IPs from Tor incomming and filter them for me so I do not have to worry about the malicious traffics.