← Back to glossary
🛡️

Web Application Firewall (WAF)

Security

XSS (Cross‑Site Scripting) Security Headers Rate Limiting Bot Detection

Policy-based filtering of HTTP(S) traffic for web apps.

Definition

A WAF inspects HTTP(S) requests/responses and applies rules (signatures, anomaly detection, rate policies) to block or mitigate attacks against web applications.

In plain English Policy-based filtering of HTTP(S) traffic for web apps.

Why this matters

Why it matters: It can mitigate exploitation attempts (e.g., injection) and reduce account abuse, protecting user data and privacy.

Example

Example: Managed WAF rules blocking XSS payloads and credential-stuffing bursts.