Since then, the market has continued to grow and evolve, especially focusing on credit card fraud prevention. This list would become the industry standard for web application security compliance. In 2003, they expanded and standardized rules through the Open Web Application Security Project’s (OWASP) Top 10 List, an annual ranking for web security vulnerabilities. They finalized a core rule set for protecting web applications, based on OASIS Web Application Security Technical Committee’s (WAS TC) vulnerability work. In 2002, the open source project ModSecurity was formed in order to make WAF technology more accessible. Other early WAF products, from Kavado and Gilian technologies, were available in the market at the same time, trying to solve the increasing amount of attacks on web applications in the late 90s.

Security information and event management (SIEM)ĭedicated web application firewalls entered the market in the late 1990s during a time when web server attacks were becoming more prevalent.Īn early version of WAF was developed by Perfecto Technologies with its AppShield product, which focused on the e-commerce market and protected against illegal web page character entries.Host-based intrusion detection system (HIDS).

Waf web application firewall