WAF
Web Application Firewall — filters HTTP/HTTPS traffic to protect web apps from OWASP-class attacks.
A WAF inspects HTTP/HTTPS to block OWASP-class attacks like SQL injection and XSS that network firewalls can’t see. It complements — never replaces — secure coding and input validation. WAFs can run per-rule in detect, block, or log-only mode, letting teams tune rules before enforcing them.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →