Securing sites and APIs from the edge
WAF: Security and Threat Visibility
Our WAF scans traffic in real-time and analyzes malicious requests and security risks, protecting your sites and APIs from attacks and exploits. It provides visibility into threats so you can immediately act on them – all in a simple, user-friendly way.
Our web application firewall technology detects and blocks malicious traffic without the need to define rules and ensures minimal latency while keeping your web applications safe.
Our cutting-edge WAF fully integrates with our CDN while being compatible with other CDNs on the market. It doesn’t require any on premise installation and provides instant protection.
More importantly, you will have a white-glove support team by your side 24/7, regardless of your technical level, to make sure everything runs smoothly.
With our unlimited WAF service, you can customize your every need at no additional cost – no more worrying about added rules or extra sites increasing the bill. Our billing is by request and you’ll be able to include every ruleset you need for all your sites.
Advanced Threat Security
Our WAF protects against application attacks such as SQL Injection, XSS, and CSRF and stops advanced attacks beyond the OWASP top 10.
It also keeps users safe against account takeover (ATO). It’s a great complement to our CDN’s anti-DDoS systems, protecting against a wide range of network and application-level attacks.
Customizable protection
You can configure the protection of all your sites and applications individually and under custom conditions, defending your origin servers against malicious traffic.
Real-Time Analytics
Real time visibility that allows you to immediately adapt site security and application security based on moment-to-moment circumstances.
Interoperability
We deliver logs in real time, allowing you to integrate traffic and attack data into security systems such as a SIEM or big data and business intelligence systems.
Adaptability
Our WAF can be temporarily disabled if you need the answers to arrive in their original form. You can also turn on detection-only mode, which identifies requests that are considered dangerous but allows them to pass through while monitoring them. This allows you to perform preliminary tests to detect false positives and set the necessary exceptions.
Granularity
Our WAF solution is fully customisable and adapts to the way you work.
You can enable or disable our WAF based on any element in the request, including geolocalization, which allows you to set restriction policies depending on the country. In addition, you can turn on WAF for certain IPs only which allows for testing and troubleshooting without affecting the bulk of users.
In strict mode, the WAF blocks requests it identifies as malicious. In detection mode, it logs them without blocking them. Detection mode is useful for observing how the rules behave with your actual traffic before activating blocking, allowing you to identify and correct false positives without affecting legitimate users. It’s also useful for logging internal or trusted IPs that you don’t want to block, but that are still worth logging.
It protects both. The WAF inspects HTTP/HTTPS traffic regardless of whether the request is directed to a web page or an API endpoint. You can apply specific rules based on the route, HTTP method, or content type of the request.
You can create exceptions based on IP address, route, header, or request parameter. If a rule blocks legitimate traffic, the signature is adjusted or an exception is added at no extra cost. Transparent Edge doesn’t charge per rule: you can customize the configuration without limit on the number of active rules.
The latency added by analyzing each request is minimal (on the order of a few milliseconds) and, in practice, imperceptible to the end user. The WAF operates at the edge, meaning that traffic is processed at the node closest to the visitor before reaching your origin server.
Here is the product sheet
