Delivery
WAF rules
The WAF runs a set of checks against incoming requests, covering the attack categories that show up most often against typical web origins.
How it works
- SQL injection, XSS, path traversal, and command injection patterns are each checked
- A match is blocked before it reaches your origin
- Matches are written as a security event for later review
Good to know
- This kind of detection is intentionally simple and fast — it's a first line of defense, not a replacement for origin-side input validation