The Fastly Next-Gen WAF (powered by Signal Sciences) protects your apps wherever they live: on-premises, in containers, in the cloud, and at the edge. It’s so effective at preventing false positives that over 90% of our customers use it in full blocking mode.
Our customers repeatedly point to our superior technical efficacy and customer support. That’s why we’re the only WAAP vendor to receive the Gartner Peer Insights Customers' Choice distinction four years in a row.
Our unified security solution detects and prevents OWASP injection and advanced attacks targeting your apps and APIs.
Fastly offers the most flexibly deployed WAF on the market and can protect your apps and APIs wherever they are with one integrated solution offering the same level of visibility and actionable insights and alerts.
App and API protection
Traditional web application firewalls (WAF) rely on regular expression pattern-matching rules. They’re difficult to manage and require never-ending rules tuning to eliminate false positives that can block legitimate traffic. The Fastly Next-Gen WAF leverages a fundamentally different approach, developed by Signal Sciences, that effectively detects and blocks malicious traffic without rules tuning, leaving your AppSec teams to focus on bigger problems.
Network Learning Exchange (NLX)
NLX is a trusted IP reputation feed based on anonymized, confirmed malicious activity collected from tens of thousands of our distributed software agents. It is uniquely able to recognize attack patterns across our customer network, then proactively alert upon and defend your web apps and APIs.
Learn more
SmartParse
Unlike common regex-based WAFs, our next-gen WAF uses SmartParse, a highly accurate detection method, to evaluate the context of each request and how it would execute, to determine if there are malicious or anomalous payloads in requests. SmartParse enables near-zero tuning and the ability to start detecting threats immediately.
Learn more
The Fastly Next-Gen WAF is a hybrid software as a service (SaaS) solution with three main components. This patented approach, developed by Signal Sciences, allows us to easily scale and protect even the highest volume applications and APIs without impacting performance.
Agents
Perform detection and decisioning against requests quickly and accurately. Can install on your infrastructure or be hosted in the cloud or on the Fastly Edge Cloud Network.
Modules
Optional but powerful component pairs with our agents to enforce high performance and reliability guarantees.
Cloud Engine
Cloud-hosted analytics backend enriches the agent asynchronously with both external and proprietary intelligence to make dynamic, app-specific detections.