[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:waf-ddos":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":143},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.","A protective layer in front of websites and APIs that absorbs denial-of-service floods and blocks injection attacks, bots and abuse.","DDoS attacks by hacktivists against European organisations are a recurring news item, and an hour of downtime for a customer-facing site has a direct cost. A web application firewall also buys time when a flaw in a web application is published before you can patch it.",[11,12,13,14],"What is the mitigation capacity, and is DDoS protection unmetered?","How fast can you deploy a virtual patch for a new vulnerability?","Does it protect APIs as well as websites?","Where is traffic inspected, and what does that mean for data residency?","Risk: outage of customer-facing services through DDoS, or exploitation of web application flaws. Control: web application firewall and DDoS protection on all public web services. Owner: web platform lead. Measure: share of public services behind the protection layer.",[17,18,19,20],"NIS2 Art. 21(2)(c): business continuity","DORA Art. 9 and 11: protection, response and recovery","CIS Control 13: network monitoring and defence","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:18.595731+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","app-and-api-protector","Akamai App & API Protector","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fapp-and-api-protector","Web application firewall, bot and DDoS protection for websites and APIs.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-waf","Cloudflare WAF and DDoS protection","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fwaf\u002F","Web application firewall and unmetered DDoS mitigation for websites and APIs.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"f5","F5","\u002Fvendor-logos\u002Ff5.png","web-app-and-api-protection","F5 Web App and API Protection","https:\u002F\u002Fwww.f5.com\u002Fsolutions\u002Fweb-app-and-api-protection","Web application firewall, API security, bot management and DDoS mitigation, as a service or self-managed.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"imperva","Imperva","\u002Fvendor-logos\u002Fimperva.png","imperva-cloud-waf","Imperva Cloud WAF","https:\u002F\u002Fwww.imperva.com\u002Fproducts\u002Fweb-application-firewall-waf\u002F","Cloud web application firewall with DDoS and bot protection.",{"total":59,"last_days":60,"recent":61},106,36,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"hackers-exploit-siteguard-waf-flaw-to-run-commands-as-admins-de332a","Hackers exploit SiteGuard WAF flaw to run commands as admins","2026-10-18T14:23:16+00:00","Hackers exploit SiteGuard WAF flaw to run commands as admins.",{"slug":68,"title":69,"published_at":70,"brief":71},"researchers-used-a-public-openai-model-to-build-a-250-000-chrome-full-chain-expl-2c2810","Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days","2026-10-14T11:19:02+00:00","Researchers used public AI to build a Chrome exploit in six days, earning $250,000.",{"slug":73,"title":74,"published_at":75,"brief":76},"shinyhunters-extorted-boeing-spin-off-prior-to-arrests-2c4e6a","ShinyHunters Extorted Boeing Spin-off Prior to Arrests","2026-10-07T13:48:45+00:00","ShinyHunters leader 'Rey' arrested, cooperating with FBI; Boeing unit extorted.",{"slug":78,"title":79,"published_at":80,"brief":81},"atlassian-data-center-flaw-draws-exploitation-attempts-within-two-hours-of-publi-b144ba","Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details","2026-10-07T11:49:26+00:00","Atlassian Data Center products exploited for arbitrary file access within two hours of public details.",{"slug":83,"title":84,"published_at":85,"brief":86},"atlassian-warns-of-critical-file-access-flaw-in-jira-confluence-17c788","Atlassian warns of critical file-access flaw in Jira, Confluence","2026-10-06T17:34:59+00:00","Atlassian warns of critical arbitrary file access flaw in self-hosted Jira, Confluence, Bitbucket.",{"slug":88,"title":89,"published_at":90,"brief":91},"ai-agents-aimed-sql-injection-at-us-and-canadian-government-sites-71780e","AI Agents Aimed SQL Injection at US and Canadian Government Sites","2026-10-02T08:38:46+00:00","AI agents attempted SQL injection attacks on US and Canadian government websites.",{"slug":93,"title":94,"published_at":95,"brief":96},"vulnerability-patch-roundup-september-2026-3cc5fa","Vulnerability & Patch Roundup — September 2026","2026-10-01T04:30:11+00:00","September 2026 WordPress vulnerability roundup includes critical flaws in WooCommerce and WPForms.",{"slug":98,"title":99,"published_at":100,"brief":101},"google-warns-of-shinyhunters-fresh-oracle-peoplesoft-campaign-3ba40d","Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign","2026-09-28T10:56:46+00:00","ShinyHunters launches mass-exploitation campaign targeting Oracle PeopleSoft CVE-2026-35273 with modified WAF-bypass",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"siteguard-waf-os-command-injection-exploited-for-root-access","SiteGuard WAF OS Command Injection Exploited for Root Access","2026-10-18T16:20:26.047+00:00",{"slug":108,"title":109,"published_at":110},"ai-accelerates-full-chain-chrome-exploit-development-to-just-six-days","AI Accelerates Full-Chain Chrome Exploit Development to Just Six Days","2026-10-14T12:20:21.412+00:00",{"slug":112,"title":113,"published_at":114},"atlassian-data-center-flaw-exploited-within-hours-of-disclosure","Atlassian Data Center Flaw Exploited Within Hours of Disclosure","2026-10-07T14:22:22.984+00:00",{"slug":116,"title":117,"published_at":118},"shinyhunters-exploited-unpatched-peoplesoft-flaw-to-extort-boeing-spin-off","ShinyHunters Exploited Unpatched PeopleSoft Flaw to Extort Boeing Spin-off","2026-10-07T14:20:20.195+00:00",{"slug":120,"title":121,"published_at":122},"critical-unauthenticated-file-access-flaw-in-atlassian-self-hosted-products","Critical Unauthenticated File Access Flaw in Atlassian Self-Hosted Products","2026-10-06T18:20:26.335+00:00",{"slug":124,"title":125,"published_at":126},"ai-agents-probe-government-sites-with-sql-injection-attacks","AI Agents Probe Government Sites with SQL Injection Attacks","2026-10-02T10:21:06.523+00:00",[128,131,135,139],{"slug":23,"name":129,"problem":130},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":132,"name":133,"problem":134},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":136,"name":137,"problem":138},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":140,"name":141,"problem":142},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"f5\u002Fweb-app-and-api-protection":144,"imperva\u002Fimperva-cloud-waf":156,"akamai\u002Fapp-and-api-protector":166,"cloudflare\u002Fcloudflare-waf":176},{"hq_country":145,"also_provides":146,"reviews":147,"affected":154,"reported":155},"US",[],[148,151],{"label":149,"url":150},"Gartner Peer Insights: F5 BIG-IP Advanced Web Application Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ff5-big-ip-advanced-web-application-firewall",{"label":152,"url":153},"PeerSpot: F5 Advanced WAF user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ff5-advanced-waf-reviews",11,3,{"hq_country":145,"also_provides":157,"reviews":158,"affected":165,"reported":155},[],[159,162],{"label":160,"url":161},"Gartner Peer Insights: Imperva Web Application Firewall (WAF) Gateway user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fimperva-securesphere-web-application-firewall",{"label":163,"url":164},"PeerSpot: Imperva Application Security Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fimperva-application-security-platform-reviews",0,{"hq_country":145,"also_provides":167,"reviews":168,"affected":165,"reported":175},[],[169,172],{"label":170,"url":171},"Gartner Peer Insights: Akamai Guardicore Segmentation user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fakamai-guardicore-segmentation",{"label":173,"url":174},"PeerSpot: Akamai App and API Protector user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fakamai-app-and-api-protector-reviews",1,{"hq_country":145,"also_provides":177,"reviews":178,"affected":188,"reported":189},[],[179,182,185],{"label":180,"url":181},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":183,"url":184},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",{"label":186,"url":187},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",6,2]