Automated Imperva Site Protection Audits
Every night, WebRun opens Imperva, walks each protected site to check its security policies, SSL certificate state and DNS configuration against the baseline you expect, opens a Trello card for every difference it finds, and messages you a WhatsApp summary of which sites drifted and which are exactly as configured.
How do I check my Imperva sites still have the right protection settings?
WebRun audits your Imperva protected sites every night. It checks each site's attached security policies, SSL certificate state and DNS configuration against the baseline you recorded, opens a Trello card for every difference with its before and after values, and messages you a WhatsApp summary of which sites drifted.
- A site that quietly lost a policy is caught the same night
- Certificate problems surface before they take a site down
- Every drift arrives as a ticket with the before and after values
Built for security engineers · cloud operations teams · web infrastructure teams · compliance owners
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
my.imperva.comin a real browser with your saved login - no setup, no API keys. -
1
Imperva - audit each site's configuration
imperva.com
WebRun opens Imperva to audit each site's configuration. - Open Imperva and list every protected site on the account
- For each site read which security policies are attached and whether they are set to block or monitor
- Check the SSL certificate state and its expiry date
- Check the DNS configuration points where it should and that the origin is set as expected
- Compare each setting against the baseline you recorded and note every difference
- Glance at recent security events for any site whose policy state changed
Done when Every protected site has been compared against its baseline with each difference recorded.
-
2
Trello - open a card per drift
trello.com
WebRun opens Trello to open a card per drift. - Open a Trello card for each site that has drifted from its baseline
- Put the site name, the setting that changed and what it changed from and to in the description
- Label cards by severity, with a missing or disabled policy and a certificate problem above a cosmetic difference
- Update the existing card rather than opening a second one when the same drift is still unresolved
Done when Every unresolved drift has a labelled Trello card with the before and after values.
-
3
WhatsApp - send the nightly summary
whatsapp.com
WebRun opens WhatsApp to send the nightly summary. - Send yourself a short nightly summary
- Say how many sites were checked and how many matched their baseline exactly
- Name each site that drifted, what changed, and link its Trello card
- Call out certificates due to expire within your warning window
Done when You have tonight's audit result on WhatsApp with the drifted sites named.
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Will it change any security settings to fix drift?
No. WebRun only reads each site's policies, certificate state and DNS configuration and reports the differences. Reapplying a policy or renewing a certificate stays a manual change, so no automation touches your protection settings.
How does it know what the settings should be?
You record a baseline per site once, covering which policies should be attached and in which mode, the expected certificate state and the expected DNS setup. Each night's audit compares the live configuration against that baseline and reports only the differences.
Will it open a new card every night for the same problem?
No. WebRun updates the existing Trello card while a drift is unresolved rather than opening a duplicate, so the board shows one card per real issue and the nightly WhatsApp summary simply notes it is still open.
Related templates
Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.