thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Runtime Application Self-Protection (RASP)

Security technology embedded in an application's runtime that detects and blocks attacks in real time using application context.

Definition

RASP instruments the application or runtime to inspect calls (for example SQL queries or file access) as they execute, and can block a malicious action or terminate a session. It has more context than a WAF but adds performance overhead and is language-specific. In mobile apps, RASP refers to anti-tampering and anti-debugging protections.

Example

A RASP agent blocks a query whose structure was altered by user input, even though the payload was encoded to evade the WAF.

Exam tip

RASP = production, protects; IAST = testing, detects.

Related terms