Runtime Application Self-Protection (RASP) runs alongside applications in production to observe and analyze behavior and notify or block anomalous and unauthorized actions. While this may place an additional infrastructural burden on production environments, it delivers a real-time look into potential application security risks.