Web Application Firewall and Application Programming Interface Protection

01 / Purpose

What this service solves

WAF, API protection, CDN edge controls and application traffic management review.

Outcomes

Assess protection of application traffic and edge services.

The engagement brief establishes deliverables, responsibilities and acceptance criteria for your scope.

02 / Scope

Build around your environment.

Share domains, apps, APIs, traffic profile, CDN, existing WAF and management expectations.

Capabilities in scope

Scope is tailored to the following areas:

• Domains, applications and APIs
• Traffic profile or volume
• CDN or edge provider
• Existing WAF/API gateway
• Management requirement

Relevant technologies & environments

• Which domains, apps and APIs need protection?
• What traffic volume and CDN path exist?
• Who manages policy tuning and incident response?

03 / Delivery

A clear path to engagement.

1. Share your context

   Describe your objectives, systems and current controls.

2. Agree the boundaries

   Review technical scope, authorization, access and delivery constraints.

3. Confirm the engagement

   Agree responsibilities, timing and expected outputs before work begins.