# Which RASP tools have the strongest real-time attack blocking for financial services apps where regulatory requirements mean runtime protection is not optional?

For a roundup, I am exploring which RASP tools offer the strongest real-time attack blocking for financial services apps, where regulatory requirements make runtime protection non-optional. In finance, runtime blocking isn't just a preference; it's often a compliance line item, so the bar is real-time defense you can stand behind with auditors. The three that come up most for that combination are Dynatrace, Contrast Security, and OpenText Core Application Security, all from the Runtime Application Self-Protection (RASP) Tools category.

Dynatrace (4.5 stars, 1,365 reviews) - it has heavy adoption in financial services and banking among reviewers, who value continuous, real-time visibility and anomaly detection across the stack, with runtime application security layered on through its Application Security module. Most reviews focus on observability, so we weigh the security module on its own merits.
Contrast Security (4.5 stars, 49 reviews) - reviewers in fintech contexts specifically praise real-time protection, accurate runtime detection, and blocking attacks as requests come in, which is the core ask here. The IAST plus Protect combination gives auditors a clear runtime story.
OpenText Core Application Security (4.1 stars, 34 reviews) - reviewers describe real-time control over sensitive data and protection that reduces the likelihood of cyberattacks, positioned within a broader, research-backed AppSec suite that regulated shops often already run.
Imperva Runtime Application Self-Protection (RASP) (5.0 stars, 2 reviews) - built around blocking attacks before exploitation with minimal performance impact, which fits the real-time requirement, though its very small review base means it rests more on documented capability than deep feedback.

Given the regulatory angle, do you need blocking that maps cleanly to a framework like PCI DSS, or broad OWASP-class coverage first? Are these apps mostly internal or customer-facing? And is anyone here running one of these specifically under a regulatory mandate?

##### Post Metadata - Posted at: 18 days ago - Author title: Marketer - Net upvotes: 1 ## Comments ### Comment 1 <p>In a regulated context specifically, review depth stops being just a data-quality nuance and starts looking like audit evidence: Contrast's fintech-specific reviews are third-party proof you could actually point to if a regulator asked how the tool was validated, while Imperva's two reviews mean you're relying almost entirely on the vendor's own documentation for that same conversation. Dynatrace sits in an odd middle spot, since its huge review count proves out the observability side but says very little about the security module auditors would actually care about. That makes Contrast the one with the clearest paper trail here, not necessarily the strongest technical claim on its own. Has anyone actually had to produce vendor evidence like this during a PCI or SOX audit, and if so, which of these held up?</p> ##### Comment Metadata - Posted at: 11 days ago - Author title: SEO Content Writer ## Related discussions - [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team) - Posted at: about 13 years ago - Comments: 6 - [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section) - Posted at: about 13 years ago - Comments: 0 - [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm) - Posted at: about 13 years ago - Comments: 4