Security

Host-Based WAF

A host-based WAF is a web application firewall installed on the web server itself, usually as a module in Apache httpd, Nginx or IIS, that inspects HTTP requests inside the server before the application handles them.

Deep dive

Learn Article

What Is a Host-Based WAF? Where It Runs and Why It Matters

A host-based WAF runs inside the web server and filters HTTP requests locally. How it differs from a network WAF and why its blast radius is larger.

beginner 4 min read

Back to glossary