Insights, tutorials, and news about Web Application Firewalls and application security.
Cloudflare released EmDash, an open-source CMS with sandboxed plugin security. The architecture is solid, but the ecosystem gap with WordPress is vast. The real impact may be pushing WordPress toward better plugin isolation.
Huskeys exits stealth with $8M seed funding for an agentic AI platform that sits on top of existing WAFs. The thesis: WAF enforcement works, but nobody can manage the rules at scale. Early customers include TikTok and Hugging Face.
AI labs are pushing into application security, but three structural barriers keep them out of runtime protection, proprietary threat intelligence, and SOC workflows. WAFs are safe for now. Here is what RSAC 2026 revealed.
DDoS attacks surged 150% in H2 2025. Gcore reports 1.3 million attacks in Q4 alone. Cloudflare mitigated 47.1 million over the year, peaking at 31.4 Tbps. Attack durations under 60 seconds make manual response useless.
SecureIQLab today announced that its SOCx AI-Driven Cloud Security Validation Platform has integrated AI Security CyberRisk Validation as its fourth active methodology, joining Advanced Cloud Firewalls (ACFW),
Cloudflare, AMD, and WebPros collaborate to build an AI hosting stack, combining cloud infrastructure, processors, and hosting tools for scalable AI deployment.
Gartner formalized the hybrid mesh firewall category in 2025. Check Point, Fortinet, and Cisco are the three vendors leading the space. Here is how they compare and what it means for WAF buyers.
Palo Alto Networks patches CVE-2026-0227, a high-severity DoS flaw in PAN-OS that lets unauthenticated attackers push firewalls into maintenance mode. Nearly 6,000 devices are exposed online.
SecureIQLab has published the first independent methodology for validating AI security solutions, spanning 32 validation scenarios across three security layers. Up to 20 vendors are considered for validation, spanning pure-play LLM firewalls, broader AI security solutions, and API security and edge platforms offering LLM protection. The methodology measures both prevention and detection, penalizin
HAProxy Technologies has launched HAProxy Fusion 2.0 and HAProxy Unified Gateway 1.0 at KubeCon Amsterdam. Fusion 2.0 introduces centralized security policy management with Security Profiles, a visual Threat-Response Matrix, and a unified security control plane for WAF, bot management, and DDoS protection. Built on HAProxy Enterprise 3.2 LTS, it includes native Kubernetes deployment via a new Oper
Radware spin-off Skyhawk Security now maps AI-driven cloud attack simulations to five named adversary groups including Scattered Spider and APT29, helping teams prioritize defenses based on actual threats.
HPE expands its hybrid mesh firewall platform with AI visibility controls, keyword filtering for AI tools, and the new SRX440 appliance. Announced at RSAC 2026, all features ship in Q2.