Skip to main content

Security glossary

Web application firewall

A control that inspects and filters web requests according to managed or custom rules before they reach an application.

Example

A WAF may block a known malicious request pattern or slow repeated abusive requests to a login endpoint.

Why it matters

It can reduce exposure to common attacks, but it cannot repair vulnerable code, weak permissions or unsafe operational practices.

Related terms