Glossary / Security & encryption

WAF (Web Application Firewall)

A WAF sits in front of a website or API and inspects the actual content of HTTP requests, blocking attack patterns a network firewall can't see — SQL injection, cross-site scripting, credential stuffing, malicious bots. It's a standard layer on production systems handling real business data; our own platform runs behind one on AWS. A WAF complements secure code — it never replaces it.