When and Why to Use a WAF: A Guide for WAF Sceptics
WAFs are neither useless nor a security force field. Here is what they are good at, where they fail, and when putting one in front of an application makes sense.
Your Application Needs a WAF. Just Not for the Reason You Think
A web application firewall will not fix insecure code. It can still give applications a valuable layer of protection when bugs, bots and attacks reach the front door.
Everyone Says a WAF Is Useless. Are They Right?
Ten good reasons not to trust a web application firewall—and why most of them are arguments for using one properly, not going without one.