Sentryware's Hive 2.0 and Imperva's SecureSphere 2.0 are reviewed for their ability to enhance Layer 7 Web application security. Rated excellent, both products have a default configuration that stops attacks; offer load balancing and high availability; detect and guard credit cards and social security numbers; and protect Web servers and database servers. SecureSphere 2.0 is available as software or an appliance, while Hive is an appliance. SecureSphere also has user-customizable signatures, learning mode, and a centralized management server. Neither SecureSphere nor Hive depends on hard-trigger policies for attack prevention. Hive is a proactive security device that embeds Advanced Encryption Standard (AES)-encrypted tokens in the Hypertext Markup Language (HTML) stream dynamically. SecureSphere is server-based and uses SecureSphere Gateways to transparently log network traffic for real-time packet analysis and to compare patterns to previously profiled traffic stored in a SQL database. Both products get very high marks for scalability, but Hive has better performance, while SecureSphere is rated better for configuration. SecureSphere's Correlated Attack Validation engine compares collected data to known vulnerabilities and against learned traffic patterns and then condenses all data and looks for patterns. An alert is sent when there is an indication that an attack is occurring.