Cloudbric WAAP (WAF+ & Managed Rules for AWS WAF)

Penta Security Inc. is a Korean information security company founded in 1997 by Seokwoo Lee on its data encryption technology and headquartered in Yeongdeungpo-gu, Seoul. It is known for the WAPPLES web application firewall and D.AMO encryption, and in October 2023 it merged with its cloud subsidiary Cloudbric Inc., making Cloudbric a business line of Penta Security.

Cloudbric is a cloud-delivered security platform built on Penta Security's WAAP technology and Cloudbric Labs threat intelligence. Cloudbric WAF+ is a fully managed web application firewall that protects websites against web, bot, DDoS and API attacks, complemented by Cloudbric ADDoS and a CDN. For companies already on AWS, Cloudbric WMS manages AWS WAF and six Cloudbric Managed Rules products on AWS Marketplace add ready-made rule sets, including IP reputation. The portfolio also includes ZTNA services (PAS and RAS), a VPN app and an anti-phishing app. The vendor cites 100,000 references across 114 countries.

• Cloudbric WAF+: Fully managed cloud WAF that blocks web application and API attacks.
• Cloudbric ADDoS: Mitigates DDoS attacks on websites and applications.
• Managed Rules for AWS WAF: Six rule set products on AWS Marketplace, including IP reputation.
• Cloudbric WMS: Manages AWS WAF configuration and monitoring from one console.
• ZTNA services: Cloudbric PAS and RAS provide zero trust access to internal resources.
• Cloudbric Labs: Shares threat intelligence used to update protection rules.

A Vietnamese e-commerce company hosting on AWS can add Cloudbric Managed Rules to AWS WAF to block common web attacks and bad IPs. A university or hospital can put its public portals behind Cloudbric WAF+ and ADDoS without installing appliances. A Korean-invested manufacturer in Vietnam can use ZTNA services for remote access to internal systems.

A fully managed cloud WAF lets companies protect websites without buying appliances or hiring rule-tuning specialists. AWS customers can subscribe to ready-made Managed Rules directly in AWS WAF instead of writing rules themselves, and the vendor cites Tolly Group validation of its detection rate. One provider covers web, bot, DDoS and API attacks together with CDN delivery. A Vietnamese subsidiary in Hanoi provides local presence for buyers in Vietnam.

As websites and applications move to AWS and other clouds, buyers prefer cloud-delivered WAF and managed rule sets over hardware appliances. AWS opened a Malaysia region in December 2024, and Penta Security extended its Managed Rules there in 2025, reflecting growing Southeast Asian cloud demand. Vietnamese enterprises and public agencies hosting web services in the cloud need managed web protection without large security teams.

Penta Security was founded in 1997 and is headquartered in Seoul, with Penta Security K.K. in Tokyo, Penta Security VINA Co., Ltd. in Hanoi and a branch in Abu Dhabi. Cloudbric Inc. merged into Penta Security in October 2023 and continues as a Penta Security brand. ISO 27001:2022 is shown on the company website, and Penta Security is one of the ISVs offering managed rule groups within AWS WAF.