What is a web application firewall (WAF)?

A web application firewall (WAF) protects web applications from attacks over the Hyper Transfer Protocol (HTTP). The typical attack vectors for web applications are described in the OWASP Top 10 and include injection attacks (SQL, Command, LDAP, Script or XPath Injections), Cross Site Scripting (XSS), Hidden Filed Tampering, Parameter Tampering, Cookie Poisoning, Forceful Browsing or Buffer Overflows. A WAF provides upstream protection against these attacks. 

WAF is a part of "WAAP"

The boundaries between web applications and APIs are becoming increasingly blurred. This is because modern web applications use REST APIs to provide a fast and convincing user experience. The security of web applications and APIs should therefore not be considered in isolation either. WAF functions and API security belong together and they are being merged in Web Application and API Protection (WAAP) solutions.

What is WAAP?

Information for you

-Our whitepapers-

Executive View: KuppingerCole - Airlock Secure Access Hub for applications and APIs

This KuppingerCole Executive View report provides an architectural and functional overview of the Airlock Secure Access Hub, an integrated platform for secure access management - a multicloud-native security tool for web applications, APIs and beyond.

 

Fill out the form now and receive Executive View!

Whitepaper: Security for cloud-native applications

You can read about how companies can ensure the security of web applications and APIs in Kubernetes in the white paper "Security for cloud-native applications", which was created in collaboration between heise and Airlock.

 

Request whitepaper

Whitepaper: Zero Trust is a journey

The ongoing digital transformation of the world is progressing and having a profound impact on our personal and professional lives in ways that were difficult to imagine just a few years ago.


This white paper discusses the effects of continuous digitalization and its impact.

Request free of charge

Off to DevSecOps

In this white paper, you will learn the most important insights into how you can implement DevSecOps successfully and efficiently, which security components are required for this and the advantages of a microgateway architecture.

 

Request free of charge

Airlock 2FA - Strong authentication. Simple.

Double security - this is what two-factor authentication offers in the field of IT security.


Find out more about strong authentication and the possibilities offered by Airlock in our white paper.

Download for free

Further whitepapers

We provide you with free white papers on these and other topics:

 

  • Successful IAM projects
  • compliance
  • Data protection (DSGVO)
  • Introduction of PSD2
  • PCI DSS requirementsPCI DSS requirements
Request free of charge