Progress Unveils Fully Managed Web Application Firewall for MOVEit Cloud to Bolster File Transfer Security and Support PCI 4.0 Compliance

Rhea-AI Summary

Progress (PRGS) has announced the integration of Web Application Firewall (WAF) functionality into its MOVEit Cloud managed file transfer solution. This enhancement arrives ahead of the March 31, 2025 deadline for PCI DSS 4.0 compliance, which requires WAF deployment for public-facing applications.

The new WAF feature automatically monitors and filters HTTPS traffic to protect against injection attacks and unauthorized file access. The solution is built on OWASP-based industry standards and is backed by Progress's ISO 27001 and SOC 2 certifications.

Key benefits include:

• Enhanced security against OWASP Top 10 threats
• Compliance with PCI DSS 4.0, HIPAA, HITECH, and HIPAA Omnibus standards
• 24/7 monitoring and support from Progress security specialists
• Multi-node scaling capabilities for managing demand spikes
• Streamlined administration with Progress experts managing WAF updates and testing

Positive

• New WAF functionality positions company ahead of mandatory PCI 4.0 compliance requirements
• Expands security capabilities with OWASP-based protection
• Strengthens product offering with automated monitoring and filtering features
• Multi-node scaling capability supports business growth

Negative

• None.

Insights

Technology Security Analyst

Progress's addition of Web Application Firewall (WAF) functionality to its MOVEit Cloud managed file transfer solution represents a strategic product enhancement with well-timed market positioning. This release directly addresses the upcoming PCI DSS 4.0 compliance deadline of March 31, 2025, which mandates WAF deployment for public-facing applications handling payment data.

The enhancement strengthens Progress's competitive position in the managed file transfer (MFT) market by addressing critical security concerns related to sensitive data transfers. By offering built-in WAF capabilities that protect against OWASP Top 10 threats, Progress eliminates the need for customers to integrate third-party security solutions, potentially increasing product stickiness and reducing churn.

The fully managed nature of this security enhancement aligns with market demand for simplified cybersecurity solutions that reduce administrative overhead. By handling WAF updates, testing, and scaling, Progress addresses the talent gap challenge many organizations face with specialized security personnel.

This product improvement comes at a important time when organizations are increasingly concerned about supply chain attacks and third-party risk. The emphasis on ISO 27001 and SOC 2 certifications further strengthens the company's security credibility in a market where trust is paramount.

While Progress hasn't provided specific revenue projections for this enhancement, the timing aligns with increasing regulatory requirements and heightened cybersecurity concerns, potentially driving both new customer acquisition and expanded usage among existing clients.

New functionality adds additional protection against cyber threats and supports compliance with evolving security standards for sensitive data transfers

BURLINGTON, Mass., March 04, 2025 (GLOBE NEWSWIRE) -- Progress (Nasdaq: PRGS), the trusted provider of AI-powered digital experience and infrastructure software, today announced the addition of Web Application Firewall (WAF) functionality to Progress® MOVEit® Cloud managed file transfer (MFT) solution. This new feature strengthens security for sensitive data by blocking malicious web traffic before it can infiltrate systems, empowering organizations to meet Payment Card Industry Data Security Standard (PCI DSS) 4.0 requirements and harden the security of their file transfers.

With PCI DSS 4.0 mandating that organizations deploy a WAF in front of public-facing applications by March 31, 2025, the new WAF functionality in MOVEit Cloud WAF delivers a critical layer of protection for businesses managing sensitive data and mission-critical file transfers.

“The addition of a Web Application Firewall in MOVEit Cloud underscores our commitment to helping businesses protect sensitive data and maintain compliance in today’s evolving threat landscape,” said Loren Jarrett, EVP & GM of Digital Experience at Progress. “By layering WAF technology into MOVEit Cloud, we help our customers guard against cyber threats, meet regulatory demands and achieve peace of mind knowing their managed file transfers are scalable and hardened against cyber threats.”

Key Features and Benefits of WAF Functionality in the MOVEit Cloud Solution:

• Enhanced Security and Defense: The WAF functionality in MOVEit Cloud WAF functionality automatically monitors and filters HTTPS traffic, mitigating risks from injection attacks, unauthorized file access and other malicious activities. It is built using OWASP-based industry standards to help protect against the OWASP Top 10 threats and is supported by Progress’ ISO 27001 and SOC 2 certifications, upholding industry-leading security practices.

• Compliance with Latest Standards: MOVEit Cloud is continuously updated to align with the most recent compliance standards for a proactive response to regulatory changes. With this release, MOVEit Cloud software is certified to meet PCI DSS 4.0 in addition to HIPAA, HITECH and HIPAA Omnibus standards.

• Streamlined Administration: MOVEit Cloud customers save valuable hours with Progress experts managing all WAF updates, testing and scaling to meet organizational needs. Its multi-node scaling supports rapid deployment and effortlessly manages spikes in demand. Additionally, MOVEit Cloud provides 24/7 monitoring, active alerts and support from Progress security specialists.
  

As cybercriminals evolve their tactics, IT leaders face mounting challenges in securing data transfers between external and internal systems. MOVEit Cloud now provides a proactive solution to help protect sensitive information, ease compliance efforts and centralize file transfers while simplifying management of the file transfer infrastructure.

For more information about the MOVEit Cloud solution and its new WAF functionality, visit https://www.progress.com/moveit/whats-new.

About Progress 
Progress (Nasdaq: PRGS) empowers organizations to achieve transformational success in the face of disruptive change. Our software enables our customers to develop, deploy and manage responsible AI-powered applications and digital experiences with agility and ease. Customers get a trusted provider in Progress, with the products, expertise and vision they need to succeed. Over 4 million developers and technologists at hundreds of thousands of enterprises depend on Progress. Learn more at www.progress.com.  

Progress and MOVEit are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and other countries. Any other trademarks contained herein are the property of their respective owners.

Press Contacts:           
Kim Baker          
Progress        
+1-800-477-6473          
pr@progress.com

FAQ

When is the PCI DSS 4.0 compliance deadline for WAF implementation that Progress PRGS is addressing?

The deadline is March 31, 2025, by which organizations must deploy a Web Application Firewall (WAF) in front of public-facing applications.

What security certifications support Progress PRGS's MOVEit Cloud WAF solution?

The solution is supported by ISO 27001 and SOC 2 certifications, and is built using OWASP-based industry standards.

What compliance standards does Progress PRGS's MOVEit Cloud solution meet?

MOVEit Cloud is certified to meet PCI DSS 4.0, HIPAA, HITECH, and HIPAA Omnibus standards.

What key security features does Progress PRGS's new MOVEit Cloud WAF provide?

It provides automatic HTTPS traffic monitoring and filtering, protection against injection attacks, unauthorized file access prevention, and defense against OWASP Top 10 threats.