Skip to main content

Web Application Firewall (WAF)

Private beta

WAF is currently in private beta. This feature is under active development and may have limited availability or functionality.

Arxignis WAF provides comprehensive protection for your web applications and APIs against a wide range of attacks and security threats.

Overview​

Our WAF solution offers:

  • Real-time protection against OWASP Top 10 threats
  • API security with specialized protection
  • Custom rule creation for specific needs
  • Performance optimization with minimal latency
  • Cloud-native deployment across multiple platforms

Core Protection Features​

OWASP Top 10 Protection​

Comprehensive protection against the most critical web application security risks:

  1. Injection - SQL, NoSQL, OS command injection
  2. Broken Authentication - Session management flaws
  3. Sensitive Data Exposure - Data leakage prevention
  4. XML External Entities (XXE) - XML processing attacks
  5. Broken Access Control - Authorization bypasses
  6. Security Misconfiguration - Configuration vulnerabilities
  7. Cross-Site Scripting (XSS) - Client-side attacks
  8. Insecure Deserialization - Object injection attacks
  9. Known Vulnerabilities - Component security issues
  10. Insufficient Logging - Security event visibility

API Security​

Specialized protection for REST and GraphQL APIs:

api_protection:
  - name: "Rate Limiting"
    type: "rate_limit"
    requests_per_minute: 1000
    per_ip: true

  - name: "Schema Validation"
    type: "schema_validation"
    strict_mode: true

  - name: "Authentication Bypass"
    type: "auth_bypass_detection"
    action: "block"

Rule Engine​

Pre-built Rules​

Comprehensive rule sets for common threats:

  • SQL Injection - Database attack prevention
  • XSS Protection - Cross-site scripting defense
  • CSRF Protection - Request forgery prevention
  • File Upload Security - Malicious file prevention
  • Bot Protection - Automated attack prevention

Performance Optimization​

Edge Computing​

  • Global edge deployment for minimal latency
  • Local rule evaluation when possible
  • Caching of frequently used rules
  • Connection pooling for API calls

Rule Optimization​

  • Rule ordering for optimal performance
  • Conditional evaluation to skip unnecessary checks
  • Caching of rule results
  • Batch processing for multiple requests

Monitoring and Analytics​

Real-time Dashboard​

  • Attack visualization with geographic mapping
  • Threat trends and patterns
  • Performance metrics and latency monitoring
  • Rule effectiveness analysis

Logging and Alerting​

  • Detailed attack logs with full context
  • Real-time alerts for critical threats
  • SIEM integration for security teams
  • Custom dashboards for specific needs

Configuration Management​

Rule Management​

  • Version control for rule changes
  • A/B testing for rule effectiveness
  • Rollback capabilities for quick recovery
  • Environment promotion from dev to production

Policy Templates​

Pre-built policy templates for common use cases:

  • E-commerce - Online store protection
  • SaaS Applications - Multi-tenant security
  • APIs - API-first application protection
  • Content Management - CMS security

Best Practices​

Rule Development​

  • Start with monitoring before blocking
  • Test rules thoroughly in staging
  • Document rule purposes and business justification
  • Regular rule reviews and updates

Performance​

  • Monitor latency impact of rules
  • Optimize rule order for efficiency
  • Use caching where appropriate
  • Scale resources based on traffic

Security​

  • Regular threat intelligence updates
  • Monitor for new attack vectors
  • Keep rules current with latest threats
  • Conduct security reviews regularly