Home Edge SecurityWAF

WEBSITE AND API PROTECTION FROM THE EDGE

WAF: SECURITY AND VISIBILITY AGAINST THREATS

Our next-generation WAF analyzes traffic in real time looking for malicious threats and security risks, protecting your websites and APIs from vulnerability exploitation and application attacks. We make threats visible so they can be acted on immediately. And we do so in a simple and accessible way.

The technology of our web application firewall detects and blocks malicious traffic without having to define rules, guaranteeing minimum latency while keeping web applications protected.

EASY TO USE

Our next-generation WAF is a web application firewall integrated with our CDN and compatible with other CDNs on the market. It does not require any installation on your infrastructure and provides immediate protection. You also get a real Spanish-speaking support team who are always standing by to help make things easier for you, no matter your technical level.

SINGLE PRICE

Our WAF offers unlimited service. We don’t bill by rules; you can personalize what you need at no additional cost. We bill by requests.

SECURITY AGAINST ADVANCED THREATS

Our WAF provides protection against known application attacks like SQL Injection, XSS, and CSRF, and against advanced attacks beyond the OWASP Top 10. It also defends you against account takeover (ATO) attacks. It perfectly complements the anti-DDoS systems of our CDN, working together to create protection against a large number of network-layer and application-layer attacks.

CUSTOMIZABLE PROTECTION

You can configure the protection of all your websites and applications individually under any conditions you want, defending your origin against malicious traffic.

REAL-TIME ANALYTICS

Visible analytics lets you immediately adapt your website and application security based on the current circumstances at any time.

INTEROPERABILITY

We deliver logs in real time, allowing you to integrate traffic and attack data into security systems like a SIEM solution or into big data and business intelligence systems.

ADAPTABILITY

It’s simple to temporarily deactivate our WAF if you need responses to arrive in their original format. You can also activate “detection only” mode, which identifies dangerous requests while allowing them to pass. This lets you run preliminary tests to detect false positives and establish the necessary exceptions.

GRANULARITY

You can activate or deactivate our WAF by any request element—including geographic location—making it possible to establish more or less restrictive policies by country. You can also activate the WAF exclusively on certain IP addresses in order to test it without affecting the majority of users.

KEY FEATURES OF OUR NEXT-GENERATION WAF

GENERAL FEATURES

  • Integrated with our CDN and integrable with others
  • Based on ModSecurity and configurable via VCL
  • Real-time analytics
  • Delivery of logs
  • Sending of personalized notifications

SECURITY FEATURES

  • Several levels of security support
  • “Strict” mode and “detection only” mode
  • TLS encryption
  • Bot management (captcha, cookie, Javascript)
  • Rate limit
  • Personalized signatures
GENERAL FEATURES
  • Integrated with our CDN and integrable with others
  • Based on ModSecurity and configurable via VCL
  • Real-time analytics
  • Delivery of logs
  • Sending of personalized notifications
SECURITY FEATURES
  • Several levels of security support
  • “Strict” mode and “detection only” mode
  • TLS encryption
  • Bot management (captcha, cookie, Javascript)
  • Rate limit
  • Personalized signatures
download

WANT TO LEARN MORE ABOUT OUR WAF?

Click below to see the product sheet.