Security software provider Imperva said it reached a deal to buy DevOps security startup Prevoty for $140 million. It’s a strategic move for Imperva and expands its hybrid cloud security strategy as more companies look to secure their hybrid environments through DevSecOps — automating core security tasks by embedding security controls and processes into DevOps.

Prevoty’s product uses runtime application self-protection (RASP) technology, an emerging security technology that is built into an application and can detect and respond to attacks in real time. It allows the application, when executed, to automatically monitor itself and detect abnormal behavior.

Forrester recently named the 5-year-old company the only “leader” in its first quarter 2018 report on the RASP sector. Forrester analyst Amy DeMartine said the acquisition means Imperva will have the most comprehensive portfolio for runtime protection. “With the inclusion of Prevoty’s RASP, Imperva will have the trifecta of runtime application protection: WAF [web application firewall], RASP, and bot management,” she wrote.

Pevoty raised $25.8 million in four funding rounds, most recently scoring $13 million in Series B investments last December.

Imperva’s software protects data in on-premises data centers as well as in public and hybrid clouds.

Combining the companies’ technology will increase customers’ security and improve visibility into their applications, said Chris Hylen, president and CEO of Imperva, in a statement.

“The acquisition is expected to advance our hybrid security strategy and further our mission to deliver best-in-class cybersecurity solutions,” Hylen said. “Prevoty complements current Imperva application and data security offerings. When combined with our on-premises and cloud products it will help businesses better protect themselves from attacks, prevent breaches, and monitor security across their digital business. Combined with Imperva insights offerings, Prevoty will further help to identify the true risks to customers’ application services.”

Prevoty CEO Julien Bellanger echoed this sentiment in a blog post about the acquision and said everyone at his company will continue to have a job at Imperva.

“With Prevoty, Imperva will build and take to market an industry leading end-to-end application security monitoring and protection platform that will span the network edge, application, and data layers. One of the many goals of the platform is to cover a myriad of application types (on-premises, cloud, and serverless) and deployment processes (agile, CI/CD, DevOps),” he wrote.

The Prevoty purchase comes a couple of years after Imperva was reportedly looking for a buyer itself and received interest from Cisco, IBM, Akamai, and Fortinet.