WAF

Technology & Computing abbreviation · Cybersecurity

WAF
Stands forWeb application firewall
CategoriesTechnology & Computing

WAF stands for Web application firewall, a cybersecurity abbreviation.

A firewall that inspects HTTP traffic to and from web applications, blocking attacks such as SQL injection, cross-site scripting and malicious bots. It comes as an appliance, a software module or a cloud service from providers such as Cloudflare, AWS and Akamai.

Example: The WAF blocked thousands of Log4Shell probes while we patched the servers.

Usage notes

The open-source ModSecurity engine and the OWASP Core Rule Set are widely used. A WAF reduces risk but does not fix vulnerable code, and attackers develop bypasses for specific rules. PCI DSS accepts one as a way to protect public-facing web applications. Pronounced "waff".

More cybersecurity abbreviations

  • 2FA – Two-factor authentication
  • AAA – Authentication, authorization and accounting
  • ABAC – Attribute-based access control
  • ACL – Access control list
  • AES – Advanced Encryption Standard
  • APT – Advanced persistent threat
  • ASLR – Address space layout randomization
  • ATT&CK – Adversarial Tactics, Techniques, and Common Knowledge
  • AV – Antivirus
  • BEC – Business email compromise
  • BYOD – Bring your own device
  • C2 – Command and control

See all 119 cybersecurity abbreviations →

Edited by the AbbreviationList.com team. Spotted an error or a missing meaning? Contact us.