[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:waf-ddos":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":143},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.","A protective layer in front of websites and APIs that absorbs denial-of-service floods and blocks injection attacks, bots and abuse.","DDoS attacks by hacktivists against European organisations are a recurring news item, and an hour of downtime for a customer-facing site has a direct cost. A web application firewall also buys time when a flaw in a web application is published before you can patch it.",[11,12,13,14],"What is the mitigation capacity, and is DDoS protection unmetered?","How fast can you deploy a virtual patch for a new vulnerability?","Does it protect APIs as well as websites?","Where is traffic inspected, and what does that mean for data residency?","Risk: outage of customer-facing services through DDoS, or exploitation of web application flaws. Control: web application firewall and DDoS protection on all public web services. Owner: web platform lead. Measure: share of public services behind the protection layer.",[17,18,19,20],"NIS2 Art. 21(2)(c): business continuity","DORA Art. 9 and 11: protection, response and recovery","CIS Control 13: network monitoring and defence","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:18.595731+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","app-and-api-protector","Akamai App & API Protector","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fapp-and-api-protector","Web application firewall, bot and DDoS protection for websites and APIs.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-waf","Cloudflare WAF and DDoS protection","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fwaf\u002F","Web application firewall and unmetered DDoS mitigation for websites and APIs.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"f5","F5","\u002Fvendor-logos\u002Ff5.png","web-app-and-api-protection","F5 Web App and API Protection","https:\u002F\u002Fwww.f5.com\u002Fsolutions\u002Fweb-app-and-api-protection","Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"imperva","Imperva","\u002Fvendor-logos\u002Fimperva.png","imperva-cloud-waf","Imperva Cloud WAF","https:\u002F\u002Fwww.imperva.com\u002Fproducts\u002Fweb-application-firewall-waf\u002F","Cloud web application firewall with DDoS and bot protection.",{"total":59,"last_days":60,"recent":61},130,53,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"critical-apache-http-2-vulnerability-cve-2026-119618-how-imperva-protects-custom-392354","Critical Apache HTTP\u002F2 Vulnerability (CVE-2026-119618): How Imperva Protects Customers","2026-11-12T17:57:05+00:00","Critical Apache HTTP\u002F2 vulnerability CVE-2026-119618 allows remote code execution.",{"slug":68,"title":69,"published_at":70,"brief":71},"siemens-industrial-edge-management-ff020d","Siemens Industrial Edge Management","2026-11-12T12:00:00+00:00","Siemens Industrial Edge Management affected by Node2Shell buffer overflow (CVE-2026-111497)",{"slug":73,"title":74,"published_at":75,"brief":76},"dark-storm-team-expands-ddos-for-hire-operations-demands-5-000-to-stop-alleged-a-08370d","Dark Storm Team Expands DDoS-for-Hire Operations, Demands $5,000 to Stop Alleged Amino Attack","2026-11-10T13:18:07+00:00","Dark Storm Team offers DDoS-for-hire services and extorts victims, demanding $5,000 to stop an alleged Amino attack.",{"slug":78,"title":79,"published_at":80,"brief":81},"researchers-pwn-automakers-android-apps-to-remotely-unlock-cars-honk-horns-455923","Researchers pwn automakers’ Android apps to remotely unlock cars, honk horns","2026-11-09T17:31:00+00:00","Researchers exploited flaws in automakers' Android apps to remotely unlock cars and honk horns.",{"slug":83,"title":84,"published_at":85,"brief":86},"modsecurity-patches-two-high-severity-flaws-allowing-waf-bypass-and-potential-re-5ff883","ModSecurity Patches Two High-Severity Flaws Allowing WAF Bypass and Potential Remote Code Execution","2026-11-09T10:31:28+00:00","ModSecurity patches two high-severity flaws enabling WAF bypass and potential RCE.",{"slug":88,"title":89,"published_at":90,"brief":91},"hackers-launch-240-000-exploit-attempts-wordpress-core-flaw-enabling-remote-code-afd138","Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution","2026-11-06T14:15:17+00:00","Hackers launched 240,000 exploit attempts against a WordPress Core vulnerability.",{"slug":93,"title":94,"published_at":95,"brief":96},"over-60-000-attacks-target-wordpress-rce-vulnerability-within-24-hours-778709","Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours","2026-10-31T06:02:41+00:00","WordPress RCE vulnerability targeted by over 60,000 attacks within 24 hours.",{"slug":98,"title":99,"published_at":100,"brief":101},"cloudflare-reports-18-2-million-network-layer-ddos-attacks-in-q3-up-38-293569","Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%","2026-10-31T04:56:12+00:00","Cloudflare reports 18.2M network-layer DDoS attacks in Q3, a 38% increase.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"critical-apache-http2-rce-flaw-demands-immediate-patching-1794536440453","Critical Apache HTTP\u002F2 RCE Flaw Demands Immediate Patching","2026-11-13T02:20:40.403+00:00",{"slug":108,"title":109,"published_at":110},"critical-buffer-overflow-in-third-party-library-exposes-siemens-industrial-edge-systems","Critical Buffer Overflow in Third-Party Library Exposes Siemens Industrial Edge Systems","2026-11-12T18:21:30.962+00:00",{"slug":112,"title":113,"published_at":114},"ddos-for-hire-group-extorts-victims-for-5000-to-stop-attacks","DDoS-for-Hire Group Extorts Victims for $5,000 to Stop Attacks","2026-11-10T14:23:02.184+00:00",{"slug":116,"title":117,"published_at":118},"default-credentials-and-waf-bypasses-let-researchers-remotely-hijack-connected-cars","Default Credentials and WAF Bypasses Let Researchers Remotely Hijack Connected Cars","2026-11-09T18:21:26.782+00:00",{"slug":120,"title":121,"published_at":122},"modsecurity-waf-flaws-expose-applications-to-bypass-and-rce","ModSecurity WAF Flaws Expose Applications to Bypass and RCE","2026-11-09T11:21:25.062+00:00",{"slug":124,"title":125,"published_at":126},"240000-exploit-attempts-hit-wordpress-rce-flaw-on-day-of-patch-release","240,000 Exploit Attempts Hit WordPress RCE Flaw on Day of Patch Release","2026-11-06T15:22:03.771+00:00",[128,131,135,139],{"slug":23,"name":129,"problem":130},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":132,"name":133,"problem":134},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":136,"name":137,"problem":138},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":140,"name":141,"problem":142},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"f5\u002Fweb-app-and-api-protection":144,"imperva\u002Fimperva-cloud-waf":156,"akamai\u002Fapp-and-api-protector":167,"cloudflare\u002Fcloudflare-waf":177},{"hq_country":145,"also_provides":146,"reviews":147,"affected":154,"reported":155},"US",[],[148,151],{"label":149,"url":150},"Gartner Peer Insights: F5 BIG-IP Advanced Web Application Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ff5-big-ip-advanced-web-application-firewall",{"label":152,"url":153},"PeerSpot: F5 Advanced WAF user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ff5-advanced-waf-reviews",12,3,{"hq_country":145,"also_provides":157,"reviews":158,"affected":165,"reported":166},[],[159,162],{"label":160,"url":161},"Gartner Peer Insights: Imperva Web Application Firewall (WAF) Gateway user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fimperva-securesphere-web-application-firewall",{"label":163,"url":164},"PeerSpot: Imperva Application Security Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fimperva-application-security-platform-reviews",0,7,{"hq_country":145,"also_provides":168,"reviews":169,"affected":165,"reported":176},[],[170,173],{"label":171,"url":172},"Gartner Peer Insights: Akamai Guardicore Segmentation user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fakamai-guardicore-segmentation",{"label":174,"url":175},"PeerSpot: Akamai App and API Protector user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fakamai-app-and-api-protector-reviews",2,{"hq_country":145,"also_provides":178,"reviews":179,"affected":189,"reported":190},[],[180,183,186],{"label":181,"url":182},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":184,"url":185},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",{"label":187,"url":188},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",6,16]