https://www.peakhour.io/Wed, 29 Jul 2026 10:00:00 +1000https://www.peakhour.io/blog/how-to-tune-google-cloud-armor-waf/<p>Tune Cloud Armor preconfigured WAF rules with preview traffic, versioned signatures, sensitivity levels, field exclusions and policy priority.</p>ACWed, 29 Jul 2026 10:00:00 +1000tag:www.peakhour.io,2026-07-29:/blog/how-to-tune-google-cloud-armor-waf/Application SecurityWAFGoogle Cloud ArmorGoogle CloudOWASP CRSApplication SecurityFalse PositivesWAF Tuninghttps://www.peakhour.io/blog/how-to-tune-cloudflare-waf/<p>Trace a Cloudflare OWASP anomaly-score block to the rules that raised the score, then choose the right override or exception.</p>ACWed, 29 Jul 2026 09:45:00 +1000tag:www.peakhour.io,2026-07-29:/blog/how-to-tune-cloudflare-waf/Application SecurityCloudflare WAFWAFOWASP CRSApplication SecurityFalse PositivesWAF Tuninghttps://www.peakhour.io/blog/how-to-tune-coraza-waf/<p>Run Coraza and OWASP CRS on Caddy in DetectionOnly, read the audit log and limit each exclusion to the field and route that need it.</p>ACWed, 29 Jul 2026 09:00:00 +1000tag:www.peakhour.io,2026-07-29:/blog/how-to-tune-coraza-waf/Application SecurityCorazaCaddyOWASP CRSWAFApplication SecurityFalse PositivesWAF Tuninghttps://www.peakhour.io/blog/how-to-tune-your-waf/<p>A practical process for running a CRS-based or managed WAF in detection mode, finding repeatable false positives and writing narrow exceptions that survive real application traffic.</p>ACTue, 28 Jul 2026 10:30:00 +1000tag:www.peakhour.io,2026-07-28:/blog/how-to-tune-your-waf/Application SecurityWAFOWASP CRSModSecurityCorazaApplication SecurityFalse PositivesWAF Tuning