application-security
WAF
Web Application Firewall
Definition
A WAF monitors, filters, and blocks HTTP traffic between the internet and web applications. It protects against common attacks like SQL injection, XSS, and file inclusion by inspecting requests against a set of rules.
WAFs can operate at the network edge (cloud WAF) or as a reverse proxy in front of application servers.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.