OpenRASP

Open source

Open-source runtime application self-protection framework for web applications.

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

OpenRASP has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://test-730.gitbook.io/openrasp-documents-oldVerified
Tags(open-source;cloud-native): RASP, application security, open source, Java, PHPVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hostedVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerification pending
Source repository(HTTPS URL): https://github.com/baidu/openraspVerified
SPDX license IDs(Apache-2.0;MIT): Apache-2.0Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Protection engine integrated into the application server by instrumentation, Hooking sensitive functions and examining inputs in a context-aware, in-place manner, Monitoring of database queries, file operations and network requests, JSON-format alarms picked up by Logstash, rsyslog or Flume for SIEM integration, Plugin development for custom detection logicVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Java and PHP teams adding free, self-hosted runtime attack protection inside the application serverVerification pending
Primary use cases(build;monitor;automate): Runtime application self-protection for Java and PHP applications, Detection of OWASP Top 10 attack test cases, Forensic analysis with detailed stack tracesVerification pending
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Maintenance status(active;maintenance;deprecated;EOL;archived): maintenanceVerification pending

Vendor · Maintainer

Founded year(2012): 2000Verified
Headquarters country(US): ChinaVerified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.