Positive Technologies Discontinues Active Development of PT AF 3, Shifts Focus to PT AF PRO and PT Cloud AF
Positive Technologies is winding down active development of PT Application Firewall 3 and reallocating its main engineering resources to PT AF PRO and the cloud-native PT Cloud AF.
Current customers of the older WAF solution will continue to receive technical support, but the product is unlikely to gain major new features going forward.
Why the strategy is changing
Over the past decade, corporate web infrastructure has expanded dramatically. Organizations that once managed a handful of websites now operate hundreds of applications, APIs, and microservices distributed across on-premises data centers, multiple clouds, branch offices, and subsidiary networks.
At the same time, the threat landscape has evolved. Compromising a web application is frequently no longer the attacker’s final objective but rather a foothold for deeper penetration into internal corporate networks.
According to Positive Technologies data, exploitation of vulnerabilities in internet-accessible web applications remains the most common initial access technique, responsible for 36% of successful attacks against corporate environments.
New flagship: PT AF PRO
The company’s primary focus is now PT AF PRO, a solution developed from scratch over more than six years. It is designed to protect hundreds of applications in highly distributed infrastructures and offers centralized security policy management, remote site connectivity via external agents, and the ability to apply updates without interrupting traffic processing.
Protected applications can be segmented into isolated spaces with dedicated compute resources and granular access controls for security events. This architecture targets large enterprises and holding companies that operate multiple security teams with differing service requirements.
Cloud offering gains priority
The second strategic priority is PT Cloud AF, a cloud-delivered WAF for applications and APIs that eliminates the need to purchase and maintain hardware. Customers can manage the service themselves or delegate configuration and ongoing operations to a partner.
Over the past year, the customer base for PT AF PRO has doubled, reflecting growing demand for scalable, distributed web application protection.
Related articles
Bureau 1440 Unveils Satellite Internet Terminals Reaching 700 Mbps for Industrial and Rail Use
Bureau 1440 presented three satellite terminal models at the Digital Solutions forum in Russia. The 1440 ULTRA model supports data speeds up to 700 Mbps and is designed for remote industrial sites and infrastructure, operating both stationary and in motion. The company reduced the terminal's weight by 30 percent while maintaining 600 by 600 mm dimensions and adding IP67 dust and water protection. The 1440 ZEMLYA variant is already undergoing tests on Russian Railways trains, including Lastochka and Sapsan services, and is rated for operation at speeds up to 400 km/h. A compact 1440 MINI concept aims for around 100 Mbps in a 300 by 300 mm portable form factor intended for rescue teams and expeditions. All models are being developed alongside the company's low-orbit satellite constellation, with test connections already active on rail lines and in remote settlements. Sales have not yet begun, and the company will announce availability separately while noting that maximum speeds are not guaranteed in every environment.
GTA V Unofficial Browser Port Runs Locally via WebAssembly Using Leaked Rockstar Sources
Enthusiasts created an unofficial port of GTA V that executes the game directly in the browser through WebAssembly without any cloud streaming. The project compiled the original RAGE engine to wasm64 and built a compatibility layer translating DirectX 11 calls to WebGPU. Game assets were served over HTTP while JavaScript handled input and saves, and AudioWorklet managed audio. The port retained Euphoria physics and Scaleform interfaces but removed Bink video playback. Requirements ranged from 3 to 16 GB of RAM, supporting both story mode and free roam. The site was taken offline shortly after launch, first displaying a thank-you message and later redirecting to adult content. Analysis of the build confirmed debug symbols and developer file paths consistent with leaked Rockstar source code.
PKI Storm: Managing 100,000 Simultaneous Certificate Requests in Kubernetes Recovery Scenarios
A large organization's PKI infrastructure faced a critical bottleneck when a data center outage triggered simultaneous startup of tens of thousands of Kubernetes pods, each requiring mTLS certificates. The existing setup using ESAUS and Citadel routed all requests through external certificate authorities that could only sustain 50-70 RPS against an incoming burst of 100,000 requests. Average daily load of 10-11 RPS had masked the thundering herd risk during mass recovery. Scaling the CA 15x was rejected due to cost and the fundamental dependency on real-time signing. The team introduced pre-issuance of certificates stored in a dedicated Unified Secret Storage (ЕХС) layer that supports 14,000 RPS reads while the CA continues normal operation. This architectural separation of issuance and consumption reduced recovery time from nearly 24 minutes to seconds while shifting focus to secure secret lifecycle management including KRA key protection.
MinTsifry Considers Annual 10 Billion Rubles Support Package for Russian AI Development
Russia's Ministry of Digital Development is discussing a state support package worth up to 10 billion rubles per year aimed at local AI developers. The proposed funding would cover technology development, pilot launches, and compensation for computing resources. According to Kommersant, 8 billion rubles are planned for development and implementation while 2 billion would offset computational costs. Mechanisms under consideration include subsidized loans through authorized banks and grants covering up to 80 percent of pilot project costs in priority sectors. The initiative remains in discussion with no final parameters or launch timelines confirmed yet. Industry experts note that clear selection criteria and transparent reporting will be essential to prevent intermediaries and ensure fair access for independent teams.