Protect your web applications from threats like SQL Injection and XSS using our integrated Web Application Firewall. Learn how to configure the OWASP Core Rule Set, train your WAF, and leverage this crucial layer of defense for security and PCI compliance.
The MaxMind GeoLite database has always been popular, as the only free (as in beer) source of information to try and figure out what country your website requests are coming from...
Our long time partner Metaswitch, desperately needed to stop brute force login attacks on the enterprise phone system that they supply to large telecom companies...
With numerous options available, choosing and configuring the right tool can be daunting...
There seems to be a lot of confusion about the role of a Web Application Firewall (WAF) in application security, and what types of threat a WAF can help mitigate in your deployment...
Some network engineers think that Web Application Firewalls (WAFs) are so complicated, they've been known to run away and hide for days when they've encountered one...
The ModSecurity web application firewall (WAF) engine is set to go end-of-life (EOL) on 1 July 2024...
There are two schools of thought on this: ‘yes, it should’ and ‘no, it shouldn't’. Let's look at the arguments both for and against...
Here's what we learned from crAPI about API security, and how a Web Application Firewall (WAF) can help you take things one step further...
I had the privilege of speaking in Dublin at this year's OWASP Core Rule Set Community Summit before then attending OWASP Global AppSec immediately afterwards...
Sometimes, we need to pass unusually large HTTP requests through our WAF stack...
A while ago I was asked if it would be possible to apply some general rate limiting in HAProxy and the WAF, in order to help prevent DOS-style attacks on a customer's servers...
All WAF vendors and services using ModSecurity are affected by this vulnerability (unless they have the vulnerable piece of code disabled, by chance)...
