Skip to content

Web Application Firewall (WAF)

What is Web Application Firewall (WAF)?

A security solution that monitors, filters, and blocks HTTP/HTTPS traffic to and from a web application. WAFs protect against web-based attacks including SQL injection, cross-site scripting, and other OWASP Top 10 threats.

Information Security

Terms that appear alongside web application firewall (waf)

Each of these is named in at least one of the same controls as web application firewall (waf). The number is how many controls name both.

Frameworks that govern web application firewall (waf)

NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on web application firewall (waf)

Requirements naming web application firewall (waf) across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Layer 3 Applications per X.805 Clause 7.3: The Applications Security Layer addresses requirements of network-based applications accessed by service provider customers.

X805-Layer3-Applications-Security-Email-Web-Directory-File-Transfer-E-Commerce-Video · ITU-T X.805 Security Layer 3 - Applications Security + Email + Web + Directory + File Transfer + E-Commerce + Video Conferencing + IM + Office Collaboration + SaaS + B2B EDI + Mobile Apps + APIs →
India Account Aggregator Framework (RBI)1 control

Incident Response and Resilience are critical for the trust foundation of the AA ecosystem given the sensitive financial data flowing through it.

RBI-AA-IncidentResponse-Resilience-RBI-CERT-In-BCP-DR-Continuity · RBI AA Incident Response + Resilience - Cyber Incident Reporting to RBI + CERT-In + Business Continuity + Disaster Recovery + Resilience + Customer Communication + Forensics →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.4 Access Control and Privileged Access Management - identity and access management (IAM) per industry best practice (ISO 27001 A.9 + NIST SP 800-53 AC family) + role-based access control (RBAC) + least privilege + segregation of duties + identity l...

LLOYDS-MS11-Access-Control-Privileged-MFA-Vulnerability-Patch-Management-MS11-4-5-PRA-Senior-Managers-Regime · Lloyds MS11 Access Control + Privileged + MFA + Vulnerability + Patch + MS11.4-5 →

Questions people ask about web application firewall (waf)

What is Web Application Firewall (WAF)?
A security solution that monitors, filters, and blocks HTTP/HTTPS traffic to and from a web application. WAFs protect against web-based attacks including SQL injection, cross-site scripting, and other OWASP Top 10 threats.
Why is Web Application Firewall (WAF) important for compliance?
Web Application Firewall (WAF) is a key concept in Information Security. Understanding web application firewall (waf) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Web Application Firewall (WAF)?
Web Application Firewall (WAF) appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, India Account Aggregator Framework (RBI), Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Web Application Firewall (WAF)?
Explore our compliance framework pages to see how web application firewall (waf) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Web Application Firewall (WAF) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.