1. What is Threats & Exploits for? #
Detect and block runtime attacks, then triage detection findings.
The principle #
Threats & Exploits centralizes security detection findings. Much of it comes from Runtime Application Protection (RAP), which spots SQL, JNDI and command injections and SSRF inside the application, and can block them.
2. Key features #
What the app offers.
Overview #
| Feature | Role |
|---|---|
| Résultats de détection | Filterable and groupable attack list |
| Enrichissement | External address reputation |
| Notions | Actor IP, affected object, code location, entry point, RAP action |
| Detection sources | Management of integrations and RAP settings |
3. Getting started #
First steps.
Step by step #
- Enable Application protection and choose, per technology, monitor or block.
- Restart the processes concerned.
- Open Threats & Exploits and triage findings.
- Fix the vulnerable code pointed to by the code location.
Prerequisites #
- Deep monitoring enabled. License: GiB-hours (DPS) or Application Security units.
Block carefully. Start in monitoring mode to measure false positives, then switch to blocking technology by technology.
Sources #
From the official documentation consulted in November 2026: labels and availability change with platform versions.
