Heuristics and Rules: Why We Built a New Old WAF

What this post added

Introduced a new, traditional rules-based Web Application Firewall (WAF) to complement the existing heuristic-based WAF. This new WAF is user-configurable, accepts ModSecurity rule syntax, adds less than 1ms of latency per request when processing the full OWASP ruleset, updates globally within 30 seconds, provides data and feedback on triggered rules, and scales to handle billions of requests daily. This addresses criticisms of the previous heuristic-only approach regarding testability and the need for explicit rules for specific threats or compliance requirements.