A Web Application Firewall is enabled by default on all your environments. It allows you to monitor activity on your web application and block malicious attacks.

In order to determine the behavior that is applied to the traffic, a score is automatically applied to each request according to their nature, origin, and type of traffic.

When this score exceeds the vigilance threshold, it trigger three different types of actions at the WAF level.

• Block: The request has triggered a Firewall rule or we know for sure the request is a malicious attack—Artifakt WAF blocks this request.
• Challenge: The request demonstrated previous suspicious activity online or we don’t know for sure the request is malicious—Artifakt WAF displays a CAPTCHA.
• Log: The request is not suspicious enough to trigger a verification mechanism but potentially deserves your attention—Artifakt WAF logs the request.