Overview
Direct Answer
Runtime Application Self-Protection (RASP) is an in-process security technology that protects applications from attacks by monitoring and controlling application behaviour during execution. It detects malicious requests, unsafe method calls, and exploitation attempts in real time, then blocks or logs them without requiring external security infrastructure.
How It Works
RASP operates by instrumenting application code or integrating with runtime environments to observe method invocations, data flows, and user inputs. When suspicious patterns—such as SQL injection payloads, buffer overflow attempts, or unauthorised file access—are detected against configurable security rules, the engine halts execution or sanitises the request before it reaches vulnerable code paths.
Why It Matters
Organisations adopt RASP to reduce mean time to detection and response for zero-day and known vulnerabilities, particularly in legacy systems where patching is delayed. It provides visibility into actual attack traffic without network-level inspection, enabling faster incident response and stronger compliance postures for regulated industries.
Common Applications
RASP is deployed in web applications, microservices, and Java/.NET environments where organisations need protection during the software development lifecycle. Financial institutions, healthcare providers, and e-commerce platforms use it to defend applications against injection attacks, cross-site scripting, and insecure deserialisation.
Key Considerations
RASP introduces performance overhead due to inline monitoring and may generate false positives if security policies are misconfigured. Tuning is essential to balance protection efficacy with application responsiveness, and it does not replace code review or secure development practices.
Cross-References(1)
More in Cybersecurity
Security Orchestration Automation and Response
Defensive SecurityTechnology that automates security operations by orchestrating tools and processes for incident response.
Cross-Site Scripting
Offensive SecurityA web security vulnerability allowing attackers to inject malicious scripts into web pages viewed by other users.
Buffer Overflow
Offensive SecurityA programming error where data written to a buffer exceeds its capacity, potentially allowing code execution.
Cyber Insurance
Security GovernanceInsurance coverage protecting organisations against financial losses from cyberattacks, data breaches, and related incidents.
Cyber Threat Intelligence
Offensive SecurityEvidence-based knowledge about adversary capabilities, infrastructure, motives, and tactics that informs security decisions and enables proactive defence against cyber attacks.
Denial of Service Attack
Offensive SecurityAn attack designed to make a machine or network resource unavailable by overwhelming it with traffic.
Zero Trust Architecture
Network SecurityA security model that requires strict identity verification for every person and device accessing resources regardless of location.
End-to-End Encryption
Data ProtectionA communication system where only the communicating users can read the messages, with encryption at both endpoints.