Overview
Direct Answer
Runtime Application Self-Protection (RASP) is an in-process security technology that protects applications from attacks by monitoring and controlling application behaviour during execution. It detects malicious requests, unsafe method calls, and exploitation attempts in real time, then blocks or logs them without requiring external security infrastructure.
How It Works
RASP operates by instrumenting application code or integrating with runtime environments to observe method invocations, data flows, and user inputs. When suspicious patterns—such as SQL injection payloads, buffer overflow attempts, or unauthorised file access—are detected against configurable security rules, the engine halts execution or sanitises the request before it reaches vulnerable code paths.
Why It Matters
Organisations adopt RASP to reduce mean time to detection and response for zero-day and known vulnerabilities, particularly in legacy systems where patching is delayed. It provides visibility into actual attack traffic without network-level inspection, enabling faster incident response and stronger compliance postures for regulated industries.
Common Applications
RASP is deployed in web applications, microservices, and Java/.NET environments where organisations need protection during the software development lifecycle. Financial institutions, healthcare providers, and e-commerce platforms use it to defend applications against injection attacks, cross-site scripting, and insecure deserialisation.
Key Considerations
RASP introduces performance overhead due to inline monitoring and may generate false positives if security policies are misconfigured. Tuning is essential to balance protection efficacy with application responsiveness, and it does not replace code review or secure development practices.
Cross-References(1)
More in Cybersecurity
Attack Surface Management
Offensive SecurityThe continuous discovery, inventory, classification, and monitoring of all external-facing digital assets to identify and reduce an organisation's exposure to cyber threats.
MITRE ATT&CK
Offensive SecurityA globally accessible knowledge base of adversary tactics and techniques based on real-world cyber observations.
Attack Surface
Offensive SecurityThe total number of points where an unauthorised user can try to enter or extract data from a system.
Intrusion Detection System
Defensive SecurityA system that monitors network traffic or system activities for malicious activity or policy violations.
Software Bill of Materials
Offensive SecurityA comprehensive inventory of all software components, libraries, and dependencies used in an application, enabling vulnerability tracking and supply chain risk management.
ISO 27001
Security GovernanceAn international standard for information security management systems specifying requirements for establishing and maintaining security.
SOC 2
Security GovernanceAn auditing framework that evaluates the security, availability, processing integrity, confidentiality, and privacy of service organisations.
Security by Design
Security GovernanceAn approach that integrates security considerations into every stage of the software development lifecycle.