Web Application Firewall (WAF)

Updated 31 Jul 2026

•
def
- •
  a firewall specifically built to protect web applications, filtering and monitoring HTTP/HTTPS traffic between a web application and the internet
•
protects against
- •
  attacks like SQL injection and cross-site scripting, by inspecting the actual content of web requests
•
related
•
cards
- •
  What does a WAF specifically protect that an NGFW doesn't specialize in?
  - •
    Web applications specifically — inspecting HTTP/HTTPS content for attacks like SQL injection and XSS

Linked references 3