Solutions WAF
Check requests before they reach your app, and watch first so nothing breaks
A WAF reads each request coming to your website or Container and stops what looks like an attack, such as attempts on your database, searches for sensitive files and password guessing. A new WAF only watches, so you can see what it would stop before you turn protection on.
Rules you choose
- OWASP Core Rule Set, with a level from 1 to 4
- Known vulnerabilities: named exploits with a CVE are stopped at any sensitivity
- Your own rules by address, country, path, query or header, to allow, block, challenge or limit a rate
- Exceptions switch rules off under a path, rule by rule or by kind of attack
Watch first, then protect
- Watch only inspects and logs every request and lets it through
- Protect applies refusals and challenges when you are ready
- If a stricter setting starts refusing many visitors soon after you make it, the WAF goes back to watching and emails you
People and bots
- A challenge costs a browser about a second of work and asks the person nothing
- Rate limits count each proven visitor, so one person in an office does not use up everyone's allowance
- Sign-in protection slows down password guessing on your sign-in pages
- You can block AI crawlers, and page requests from programs pretending to be browsers get a challenge
Frequently asked questions
Will it stop every attack?
No. A WAF lowers the risk but does not stop every kind of attack. It reads up to 64 KB of a body, and a request too large to read in full passes with what was checked. It does not replace fixing your application.
Can a WAF take my site down?
It is built to let requests through if it fails: when it is busy, cannot reach its settings or hits an error, the request passes.
What does it cost?
$5.00 per website or Container a month, by the time it is protected, plus $0.60 per million requests. Watch only costs the same as Protect, and the WAF itself is free.
What can it protect?
Websites and Containers in the same Project. One WAF can protect many of them with one set of rules.
Is it the same as the Firewall?
No. The Firewall filters network traffic inside a Network Hub. A WAF reads web requests to your website or Container.
Get started today, free
Sign up with email, no credit card needed. Websites are free with no expiry; other services are paid as used from the project’s wallet.