Web Application Firewall (WAF)

Filters and blocks malicious HTTP requests targeting web applications at the application layer.

Core Principles & Analysis

• Inspects HTTP request parameters for injection payloads before they reach application code.
• The OWASP Core Rule Set provides open-source detection rules used by ModSecurity.
• Deployed as reverse proxies, cloud edge services, or web server modules.