Aegis WAF covers the OWASP Top 10, runs in „monitor“ or „protect“ mode and blocks attacks at the edge of your network — without routing traffic through a third-party cloud and without hiding the visitor's real IP address from your own logs.
A web application is the most exposed part of most systems. A WAF (Web Application Firewall) filters requests to the application and stops known attack patterns before they reach your code and database.
Protection against injection, XSS, LFI, broken access control and other common web application risks.
First observe what the WAF would block, then turn on active protection without the risk of suddenly blocking legitimate traffic.
The WAF blocks persistent attackers at the firewall, before a request even reaches the application.
Stop traffic from regions where you have no users and reduce your attack surface.
Cover a known attack vector with a WAF rule until the real code patch arrives.
WAF events enter correlation with the rest of your infrastructure for a broader picture of the attack.
A cloud WAF routes your traffic through an external network before it reaches you. That has advantages, but also a cost: traffic and TLS pass through a third party, and a visitor's real IP can get lost. Aegis WAF works at your edge.
| CRITERION | Aegis WAF (at your edge) | Cloud WAF (third-party proxy) |
|---|---|---|
| Where traffic is processed | In your infrastructure | Through an external provider's network |
| The visitor's real IP | ✓ Directly in your logs | Behind the proxy (depends on headers) |
| TLS termination at a third party | Not required | Often required |
| Data residency | ✓ HR/EU, traffic never leaves | Depends on the provider and region |
| OWASP Top 10 protection | ✓ | ✓ |
| Dependency on a third party | Low | Higher (vendor / network) |
| Volumetric DDoS scrubbing | Limited to the application layer | The advantage of large CDN networks |
WAF (Web Application Firewall) analyzes HTTP(S) requests to a web application and blocks those matching attack patterns. Unlike a network firewall that looks at IPs and ports, a WAF understands the content of a request — parameters, headers and body.
The OWASP Top 10 is a reference list of the most common web application risks (e.g. injection, broken access control, XSS). Aegis WAF specifically covers these categories with known rules and virtual patches.
When there is a known vulnerability in an application and the patch has not yet been applied, a WAF rule can virtually patch the attack vector and buy you time until the real fix.
A WAF reduces risk but doesn't fix the vulnerability in the code. That's why it pairs with vulnerability assessment i penetration testing, which find and prove the real weaknesses of the application.
Let us show Aegis WAF on your application: first in "monitor" mode so you see its accuracy, then active protection at your edge.