{"id":13005,"date":"2021-03-20T07:47:53","date_gmt":"2021-03-20T04:47:53","guid":{"rendered":"https:\/\/hyyat.com\/waf\/"},"modified":"2026-10-04T15:26:45","modified_gmt":"2026-10-04T12:26:45","slug":"waf","status":"publish","type":"page","link":"https:\/\/www.hyyat.com\/en\/waf\/","title":{"rendered":"web attacks"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"13005\" class=\"elementor elementor-13005 elementor-12174\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-5cc9ebd elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"5cc9ebd\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-29b2916\" data-id=\"29b2916\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c11a2fd elementor-widget elementor-widget-html\" data-id=\"c11a2fd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style id=\"hyh-css\">.hyh{--b:#1557b0;--bd:#0e4a9e;--n:#0b2a55;--o:#f7931e;--g:#8cc63f;--bg:#f4f7fb;--br:#e3eaf3;--t:#3d5373;--m:#4d6180;font-family:Tajawal,sans-serif;color:var(--n);direction:rtl;text-align:right;font-size:16px;line-height:1.75}\n.hyh *{box-sizing:border-box}\n.hyh .w{max-width:1248px;margin:0 auto;padding:0 24px}\n.hyh h1,.hyh h2,.hyh h3{font-family:Tajawal,sans-serif;color:var(--n);margin:0;font-weight:800;line-height:1.3;letter-spacing:0}\n.hyh p{margin:0}\n.hyh a{text-decoration:none}\n.hyh .btn{display:inline-block;font-weight:800;font-size:16px;padding:13px 26px;border-radius:12px;line-height:1.4;transition:background-color .15s}\n.hyh .btn-o{background:var(--o);color:var(--n)}.hyh .btn-o:hover{background:#e8850f;color:var(--n)}\n.hyh .btn-l{border:1.5px solid #3b5a8a;color:#fff}.hyh .btn-l:hover{border-color:#fff;color:#fff}\n.hyh .btn-wa{background:#1f8a4c;color:#fff}.hyh .btn-wa:hover{background:#18723e;color:#fff}\n\/* hero *\/\n.hyh-hero{background:var(--bg);position:relative;overflow:hidden}\n.hyh-hero .w{display:flex;gap:56px;align-items:center;padding-top:56px;padding-bottom:64px}\n.hyh-hero .txt{flex:0 0 52%;display:flex;flex-direction:column;gap:18px;position:relative;z-index:1}\n.hyh-hero h1{font-size:44px;line-height:1.2}\n.hyh-hero .lead{font-size:18px;color:var(--t);max-width:540px}\n.hyh-dom label{display:block;font-weight:700;font-size:15px;margin-bottom:8px}\n.hyh-dom .box{display:flex;background:#fff;border:2px solid var(--n);border-radius:14px;overflow:hidden}\n.hyh-dom input[type=text]{flex:1;min-width:0;border:0;padding:13px 16px;font:inherit;font-size:17px;direction:ltr;text-align:left;background:transparent;color:var(--n);box-shadow:none}\n.hyh-dom select{border:0;border-right:1px solid #d5dfeb;background:var(--bg);font:inherit;font-weight:700;padding:0 12px;color:var(--n);height:auto}\n.hyh-dom button{border:0;background:var(--o);color:var(--n);font:inherit;font-weight:800;padding:0 24px;cursor:pointer}\n.hyh-dom button:hover{background:#e8850f}\n.hyh-dom small{display:block;margin-top:8px;font-size:14px;color:var(--m)}\n.hyh-vis{flex:1;position:relative;min-height:380px}\n.hyh-sun{position:absolute;left:40px;top:10px;width:300px;height:300px;border-radius:50%;background:var(--o)}\n.hyh-ring{position:absolute;left:-100px;bottom:-170px;width:400px;height:400px;border-radius:50%;border:40px solid var(--b);opacity:.12}\n.hyh-card{position:absolute;right:0;top:30px;width:440px;max-width:100%;background:#fff;border-radius:20px;box-shadow:0 30px 70px rgba(11,42,85,.18);overflow:hidden}\n.hyh-card .bar{display:flex;align-items:center;gap:8px;padding:12px 16px;background:var(--n)}\n.hyh-card .bar i{display:block;width:9px;height:9px;border-radius:50%;background:#3b5a8a}\n.hyh-card .url{flex:1;margin-left:10px;direction:ltr;text-align:left;font-size:14px;color:#dbe5f3;background:#1d3f73;padding:3px 12px;border-radius:8px;overflow:hidden;white-space:nowrap;text-overflow:ellipsis}\n.hyh-card .in{padding:22px 24px;display:flex;flex-direction:column;gap:10px}\n.hyh-card .lbl{font-size:14px;font-weight:700;color:var(--m)}\n.hyh-card .m{display:flex;justify-content:space-between;align-items:center;gap:10px;padding:10px 14px;border:1px solid var(--br);border-radius:12px}\n.hyh-card .m b{direction:ltr;font-size:16px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.hyh-card .m span{font-size:13px;color:var(--m);white-space:nowrap}\n.hyh .tags{display:flex;gap:8px;flex-wrap:wrap;margin-top:4px}\n.hyh .tags span{font-size:13px;font-weight:700;color:#245c12;background:#eef7e4;padding:5px 10px;border-radius:8px}\n\/* facts *\/\n.hyh-facts{border-bottom:1px solid var(--br)}\n.hyh-facts .w{display:grid;grid-template-columns:repeat(4,1fr)}\n.hyh-facts .f{padding:22px 24px;border-left:1px solid var(--br)}\n.hyh-facts .f:first-child{padding-right:0}.hyh-facts .f:last-child{border-left:0}\n.hyh-facts b{display:block;font-size:24px;font-weight:800}\n.hyh-facts span{font-size:15px;color:var(--m)}\n\/* sections *\/\n.hyh-sec{padding-top:80px}\n.hyh .hd{max-width:720px;margin-bottom:32px}\n.hyh .hd h2,.hyh .side h2{font-size:32px}\n.hyh .hd p,.hyh .side p{font-size:17px;color:var(--t);margin-top:8px}\n\/* plans *\/\n.hyh-plans{display:grid;grid-template-columns:7fr 5fr;gap:28px}\n.hyh .biz{background:var(--n);color:#fff;border-radius:24px;padding:36px;display:flex;flex-direction:column;gap:18px}\n.hyh .biz h3{color:#fff;font-size:24px}\n.hyh .biz .top{display:flex;justify-content:space-between;align-items:flex-start;gap:12px}\n.hyh .biz .top p{color:#c7d4ea;margin-top:4px}\n.hyh .badge{font-size:13px;font-weight:800;color:var(--n);background:var(--o);padding:5px 12px;border-radius:999px;white-space:nowrap}\n.hyh .biz .rows{display:flex;flex-direction:column}\n.hyh .biz .row{display:grid;grid-template-columns:1fr 1fr auto;align-items:baseline;padding:12px 0;border-top:1px solid #1d3f73}\n.hyh .biz .row:last-child{border-bottom:1px solid #1d3f73}\n.hyh .biz .row b{font-size:17px}.hyh .biz .row span{font-size:15px;color:#c7d4ea}\n.hyh .biz .row strong{font-size:18px}.hyh .biz .row small{font-size:13px;font-weight:500;color:#c7d4ea}\n.hyh .biz .note{font-size:15px;color:#c7d4ea}\n.hyh .biz .acts{display:flex;gap:12px;flex-wrap:wrap}\n.hyh .oth{display:flex;flex-direction:column}\n.hyh .oth a{flex:1;display:flex;flex-direction:column;justify-content:center;gap:2px;padding:20px 8px;border-top:1px solid var(--br);color:var(--n)}\n.hyh .oth a:last-child{border-bottom:1px solid var(--br)}\n.hyh .oth .t{display:flex;justify-content:space-between;align-items:baseline;gap:12px}\n.hyh .oth .t b{font-size:19px}.hyh .oth .t strong{font-size:17px;white-space:nowrap}\n.hyh .oth p{font-size:15px;color:var(--m)}\n.hyh .oth a:hover b{color:var(--b)}\n.hyh .hint{margin-top:22px;font-size:15px;color:var(--m)}.hyh .hint a{font-weight:700;color:var(--b)}\n\/* two-column blocks *\/\n.hyh .two{display:flex;gap:72px}\n.hyh .two .side{flex:0 0 360px}\n.hyh .feat{flex:1;display:grid;grid-template-columns:1fr 1fr;column-gap:48px}\n.hyh .feat>div{display:flex;gap:16px;padding:20px 0;border-top:1px solid var(--br)}\n.hyh .feat>div:nth-last-child(-n+2){border-bottom:1px solid var(--br)}\n.hyh .feat svg{flex:0 0 24px;margin-top:4px}\n.hyh .feat b{display:block;font-size:17px}.hyh .feat span{font-size:15px;color:var(--m)}\n\/* steps *\/\n.hyh .steps{background:var(--bg);border-radius:28px;padding:44px 56px}\n.hyh .steps h2{font-size:28px;margin-bottom:28px}\n.hyh .steps .g{display:grid;grid-template-columns:repeat(3,1fr);gap:40px}\n.hyh .steps .n{width:42px;height:42px;border-radius:50%;background:var(--n);color:#fff;font-weight:800;font-size:18px;display:flex;align-items:center;justify-content:center;margin-bottom:10px}\n.hyh .steps .g>div:last-child .n{background:var(--o);color:var(--n)}\n.hyh .steps b{display:block;font-size:18px}.hyh .steps span{font-size:15px;color:var(--m)}\n\/* reviews *\/\n.hyh .rev{display:grid;grid-template-columns:repeat(3,1fr);gap:28px}\n.hyh .rev figure{margin:0;padding:26px;background:var(--bg);border-radius:18px;display:flex;flex-direction:column;gap:14px}\n.hyh .rev .st{display:flex;gap:3px}\n.hyh .rev blockquote{margin:0;padding:0;border:0;flex:1;font-size:17px;font-weight:500;line-height:1.7;color:var(--n);font-style:normal}\n.hyh .rev figcaption{display:flex;align-items:center;gap:12px;font-weight:800}\n.hyh .rev figcaption i{width:42px;height:42px;border-radius:50%;background:var(--b);color:#fff;font-style:normal;display:flex;align-items:center;justify-content:center}\n\/* about (SEO text) *\/\n.hyh .about{max-width:900px;color:var(--t)}\n.hyh .about h2{font-size:28px;margin-bottom:12px}\n.hyh .about p{margin-bottom:12px}\n.hyh .about a{color:var(--b);font-weight:700}\n\/* faq *\/\n.hyh .faq{flex:1}\n.hyh .faq details{border-top:1px solid var(--br);padding:18px 0}\n.hyh .faq details:last-child{border-bottom:1px solid var(--br)}\n.hyh .faq summary{list-style:none;cursor:pointer;display:flex;justify-content:space-between;gap:16px;font-weight:800;font-size:17px}\n.hyh .faq summary::-webkit-details-marker{display:none}\n.hyh .faq summary:after{content:\"+\";color:var(--b);font-size:22px;line-height:1}\n.hyh .faq details[open] summary:after{content:\"\u2212\"}\n.hyh .faq details p{margin-top:10px;color:var(--t);max-width:680px}\n.hyh .faq a,.hyh .side a{color:var(--b);font-weight:700}\n\/* cta *\/\n.hyh .cta{position:relative;overflow:hidden;background:var(--n);color:#fff;border-radius:28px;padding:44px 56px;display:flex;align-items:center;justify-content:space-between;gap:32px}\n.hyh .cta:before{content:\"\";position:absolute;left:-60px;top:-90px;width:220px;height:220px;border-radius:50%;background:var(--o)}\n.hyh .cta>div{position:relative}\n.hyh .cta h2{color:#fff;font-size:28px}.hyh .cta p{color:#c7d4ea;margin-top:8px;font-size:17px}\n.hyh .cta .acts{display:flex;gap:12px;flex-wrap:wrap;margin-left:180px}\n.hyh-end{height:80px}\n.hyh a:focus-visible,.hyh button:focus-visible,.hyh input:focus-visible,.hyh select:focus-visible,.hyh summary:focus-visible{outline:3px solid var(--o);outline-offset:2px}\n@media (max-width:1024px){\n.hyh-hero .w{flex-direction:column;align-items:stretch;gap:32px}\n.hyh-hero .txt{flex:none}\n.hyh-vis{min-height:340px}\n.hyh-plans{grid-template-columns:1fr}\n.hyh .two{flex-direction:column;gap:24px}.hyh .two .side{flex:none}\n.hyh-facts .w{grid-template-columns:repeat(2,1fr)}\n.hyh-facts .f{border-bottom:1px solid var(--br)}\n.hyh .cta{flex-direction:column;align-items:flex-start}.hyh .cta .acts{margin-left:0}\n}\n@media (max-width:640px){\n.hyh{font-size:15px}\n.hyh-hero .w{padding-top:32px;padding-bottom:40px}\n.hyh-hero h1{font-size:29px}.hyh-hero .lead{font-size:16px}\n.hyh-dom .box{flex-wrap:wrap}\n.hyh-dom input[type=text]{flex:1 1 60%}\n.hyh-dom button{flex:1 1 100%;padding:13px}\n.hyh-vis{min-height:300px}\n.hyh-sun{width:180px;height:180px;left:-30px;top:-10px}\n.hyh-card{position:relative;top:0;right:0;width:100%;margin-top:40px}\n.hyh-facts .f{padding:16px 12px}.hyh-facts b{font-size:20px}\n.hyh-sec{padding-top:52px}\n.hyh .hd h2,.hyh .side h2{font-size:24px}\n.hyh .biz{padding:24px}.hyh .biz .row{grid-template-columns:1fr auto}.hyh .biz .row span{display:none}\n.hyh .feat{grid-template-columns:1fr}.hyh .feat>div:nth-last-child(2){border-bottom:0}\n.hyh .steps{padding:26px 22px}.hyh .steps .g{grid-template-columns:1fr;gap:20px}\n.hyh .rev{grid-template-columns:1fr}\n.hyh .cta{padding:30px 24px}.hyh .cta:before{width:140px;height:140px}\n}\n\/* business page extras *\/\n.hyh .plans4{display:grid;grid-template-columns:repeat(4,1fr);gap:20px;align-items:stretch}\n.hyh .pc{background:#fff;border:1px solid var(--br);border-radius:20px;padding:26px 22px;display:flex;flex-direction:column;gap:14px;position:relative}\n.hyh .pc.hot{border:2px solid var(--n);box-shadow:0 18px 40px rgba(11,42,85,.12)}\n.hyh .pc .badge{position:absolute;top:-13px;right:20px}\n.hyh .pc h3{font-size:21px}\n.hyh .pc .gb{font-size:14px;color:var(--m);margin-top:-8px}\n.hyh .pc .pr{font-size:15px;color:var(--m)}.hyh .pc .pr b{font-size:34px;font-weight:800;color:var(--n)}\n.hyh .pc ul{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:8px;font-size:15px;color:var(--t)}\n.hyh .pc li{display:flex;gap:8px;align-items:flex-start}\n.hyh .pc li:before{content:\"\";flex:0 0 16px;height:16px;margin-top:5px;border-radius:50%;background:#eaf2fb url(\"data:image\/svg+xml,%3Csvg xmlns='http:\/\/www.w3.org\/2000\/svg' viewBox='0 0 24 24' fill='none' stroke='%231557b0' stroke-width='3' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M6 12l4 4 8-8'\/%3E%3C\/svg%3E\") center\/11px no-repeat}\n.hyh .pc .btn{margin-top:auto;text-align:center}\n.hyh .btn-b{background:var(--b);color:#fff}.hyh .btn-b:hover{background:var(--bd);color:#fff}\n.hyh .plans-note{margin-top:18px;font-size:15px;color:var(--m)}\n.hyh .why6{display:grid;grid-template-columns:repeat(3,1fr);gap:0 40px}\n.hyh .why6>div{padding:22px 0;border-top:1px solid var(--br)}\n.hyh .why6 b{display:block;font-size:17px;margin-bottom:4px}.hyh .why6 span{font-size:15px;color:var(--m)}\n.hyh .why6 i{display:inline-flex;width:30px;height:30px;border-radius:50%;background:var(--n);color:#fff;font-style:normal;font-weight:800;font-size:14px;align-items:center;justify-content:center;margin-bottom:10px}\n.hyh .video{position:relative;padding-top:56.25%;border-radius:20px;overflow:hidden;background:var(--n)}\n.hyh .video iframe{position:absolute;inset:0;width:100%;height:100%;border:0}\n.hyh .rev-s{display:grid;grid-template-columns:none;grid-auto-flow:column;grid-auto-columns:calc((100% - 56px)\/3);gap:28px;overflow-x:auto;scroll-snap-type:x mandatory;padding-bottom:8px;scrollbar-width:thin}\n.hyh .rev-s figure{scroll-snap-align:start}\n.hyh .rev-s figcaption img{width:42px;height:42px;border-radius:50%;object-fit:cover}\n.hyh .rev-nav{display:flex;gap:10px}\n.hyh .rev-nav button{width:44px;height:44px;border-radius:50%;border:1.5px solid #d5dfeb;background:#fff;cursor:pointer;display:flex;align-items:center;justify-content:center}\n.hyh .rev-nav button:last-child{background:var(--n);border-color:var(--n)}\n.hyh .hd-row{display:flex;justify-content:space-between;align-items:flex-end;gap:16px;margin-bottom:28px}\n.hyh .hd-row .hd{margin-bottom:0}\n.hyh .links2{display:grid;grid-template-columns:1fr 1fr;gap:20px}\n.hyh .links2 a{display:block;padding:22px 24px;border:1px solid var(--br);border-radius:18px;color:var(--n)}\n.hyh .links2 a b{display:block;font-size:17px}.hyh .links2 a span{font-size:15px;color:var(--m)}\n.hyh .links2 a:hover{border-color:var(--b)}\n.hyh-move{background:var(--bg);border-radius:28px;padding:40px 48px}\n.hyh-move h2{font-size:28px}.hyh-move p{color:var(--t);margin-top:6px}\n@media (max-width:1024px){.hyh .plans4{grid-template-columns:repeat(2,1fr)}.hyh .why6{grid-template-columns:repeat(2,1fr)}.hyh .rev-s{grid-auto-columns:calc((100% - 28px)\/2)}}\n@media (max-width:640px){.hyh .plans4,.hyh .why6,.hyh .links2{grid-template-columns:1fr}.hyh .rev-s{grid-auto-columns:88%}.hyh-move{padding:26px 22px}}\n\n\/*hyh-biz2*\/\n.hyh .hd-c{text-align:center;max-width:760px;margin:0 auto 34px}\n.hyh-hero .hyh-vis{display:flex;align-items:center;justify-content:center;min-height:0}\n.hyh-hero .hyb-art{width:100%;max-width:560px;height:auto;display:block}\n.hyh .hyb-custom{margin-top:28px;display:flex;align-items:center;gap:24px;background:linear-gradient(120deg,#0b2a55,#1557b0);color:#fff;border-radius:22px;padding:26px 30px;position:relative;overflow:hidden}\n.hyh .hyb-custom:after{content:\"\";position:absolute;inset-inline-end:-60px;top:-60px;width:200px;height:200px;border-radius:50%;background:rgba(255,255,255,.06)}\n.hyh .hyb-custom .ic{flex:0 0 64px;width:64px;height:64px;border-radius:18px;background:rgba(255,255,255,.12);display:flex;align-items:center;justify-content:center}\n.hyh .hyb-custom .tx{flex:1;position:relative;z-index:1}\n.hyh .hyb-custom h3{color:#fff;font-size:22px}\n.hyh .hyb-custom p{color:#dbe5f3;margin-top:4px;font-size:16px}\n.hyh .hyb-custom .btn{position:relative;z-index:1;display:inline-flex;align-items:center;gap:10px;white-space:nowrap}\n.hyh .hyb-custom .btn svg{flex:0 0 22px}\n.hyh .plans-note{text-align:center;margin-top:18px;color:var(--m)}\n.hyh .plans-note a{color:var(--b);font-weight:700}\n.hyh .hyb-f9{display:grid;grid-template-columns:repeat(3,1fr);gap:22px}\n.hyh .hyb-f9>div{background:#fff;border:1px solid var(--br);border-radius:20px;padding:30px 26px;text-align:center;transition:box-shadow .2s,transform .2s}\n.hyh .hyb-f9>div:hover{box-shadow:0 16px 36px rgba(11,42,85,.09);transform:translateY(-3px)}\n.hyh .hyb-f9 .hyb-ic{display:block;margin:0 auto 14px}\n.hyh .hyb-f9 h3{font-size:19px;margin-bottom:8px}\n.hyh .hyb-f9 p{font-size:15px;color:var(--m);line-height:1.8}\n.hyh .hyb-mvh{text-align:center;max-width:760px;margin:0 auto}\n.hyh .hyb-mvh h2{font-size:30px}.hyh .hyb-mvh p{color:var(--t);margin-top:6px}\n.hyh-sec.hyb-mv-top{padding-bottom:0!important}\n.hyb-mvf .transfer-request,.hyb-mvf .transfer-request *{box-sizing:border-box}\n.hyb-mvf .transfer-request{max-width:960px;margin:0 auto;background:#f4f7fb;border-radius:24px;padding:28px;font-family:Tajawal,sans-serif;text-align:center}\n.hyb-mvf .transfer-request ul{list-style:none!important;margin:0 0 22px!important;padding:0!important;display:grid;grid-template-columns:1fr 1fr;gap:12px}\n.hyb-mvf .transfer-request li{margin:0!important;padding:0!important;border:0!important;background:none!important;list-style:none!important}\n.hyb-mvf .transfer-request li:before,.hyb-mvf .transfer-request li:after{display:none!important;content:none!important}\n.hyb-mvf .transfer-request li:last-child:nth-child(odd){grid-column:1\/-1}\n.hyb-mvf .transfer-request label{display:flex!important;align-items:center;gap:12px;margin:0!important;background:#fff;border:1.5px solid #e3eaf3;border-radius:14px;padding:14px 18px;font-size:16px;font-weight:500;color:#0b2a55;cursor:pointer;text-align:start;line-height:1.5;transition:border-color .15s,background .15s}\n.hyb-mvf .transfer-request label:hover{border-color:#1557b0}\n.hyb-mvf .transfer-request input[type=checkbox]{flex:0 0 20px;width:20px;height:20px;margin:0!important;accent-color:#1557b0;cursor:pointer;position:static!important;opacity:1!important}\n.hyb-mvf .transfer-request label:has(input:checked){border-color:#1557b0;background:#eef4fc}\n.hyb-mvf .transfer-request a.tsreq{display:inline-block;min-width:240px;background:#f7931e;color:#0b2a55!important;font-weight:800;font-size:17px;padding:14px 30px;border-radius:12px;border:0;text-decoration:none;box-shadow:none}\n.hyb-mvf .transfer-request a.tsreq:hover{background:#e8850f}\n.hyh .hyb-about{display:grid;grid-template-columns:1fr 1fr;gap:48px;align-items:center}\n.hyh .hyb-about h2{font-size:30px;margin-bottom:12px}\n.hyh .hyb-about .txt p{color:var(--t);margin-bottom:10px;font-size:17px}\n.hyh .hyb-about .txt a{color:var(--b);font-weight:800}\n.hyh .hyb-about .hy-tldr{background:#f4f7fb;border-inline-start:4px solid #1557b0;border-radius:18px;padding:26px 28px;box-shadow:0 14px 34px rgba(11,42,85,.07)}\n.hyh .hyb-about .hy-tldr p{margin:0;line-height:1.95;color:var(--t);font-size:16px}\n.hyh .hyb-about .hy-tldr strong{color:var(--n)}\n@media (max-width:1024px){.hyh .hyb-f9{grid-template-columns:repeat(2,1fr)}.hyh .hyb-about{grid-template-columns:1fr;gap:24px}}\n@media (max-width:640px){.hyh .hyb-f9{grid-template-columns:1fr}.hyh .hyb-custom{flex-direction:column;text-align:center;padding:24px 20px}.hyh .hyb-custom .btn{white-space:normal;justify-content:center;flex-wrap:wrap;width:100%;row-gap:2px}.hyh .hyb-custom .btn bdi{white-space:nowrap}.hyb-mvf .transfer-request{padding:18px}.hyb-mvf .transfer-request ul{grid-template-columns:1fr}.hyb-mvf .transfer-request a.tsreq{width:100%;min-width:0}.hyh .hyb-mvh h2,.hyh .hyb-about h2{font-size:24px}}\n\n\/*hyh-biz3*\/.hyb-mvf .transfer-request ul{overflow:visible!important}.hyb-mvf .transfer-request ul li{width:auto!important;float:none!important;padding:0!important;margin:0!important;font-size:16px!important}.hyb-mvf .transfer-request ul li label{min-height:0!important;height:100%;padding:16px 20px!important;border:1.5px solid #e3eaf3!important;font-size:16px!important;line-height:1.5!important;display:flex!important;width:100%!important}.hyb-mvf .transfer-request ul li label::after{display:none!important;content:none!important}.hyb-mvf .transfer-request ul li label input{display:block!important;float:none!important;margin:0!important;width:20px!important;height:20px!important}.hyb-mvf .transfer-request a.tsreq{line-height:1.4!important;height:auto!important;padding:14px 30px!important}\n\n\/*hyh-sec1*\/\n.hyh .hse-crumb{font-size:13.5px;font-weight:700;margin-bottom:10px;display:flex;gap:6px;flex-wrap:wrap;color:var(--m)}\n.hyh .hse-crumb a{color:#1557b0}\n.hyh .hse-nav{display:flex;flex-wrap:wrap;gap:8px;margin-top:18px}\n.hyh .hse-nav a{font-size:13px;font-weight:800;color:#1557b0;background:#eaf2fb;border-radius:999px;padding:6px 12px;transition:background .2s,color .2s}\n.hyh .hse-nav a:hover,.hyh .hse-nav a.on{background:var(--a,#1557b0);color:#fff}\n.hyh .hse-signs{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px}\n.hyh .hse-signs div{display:flex;gap:12px;align-items:flex-start;background:#fff;border:1px solid var(--br);border-radius:18px;padding:16px;font-size:15px;font-weight:700;color:var(--n);line-height:1.6;transition:transform .25s,box-shadow .25s}\n.hyh .hse-signs div:hover{transform:translateY(-4px);box-shadow:0 14px 32px rgba(11,42,85,.1)}\n.hyh .hse-signs i{flex:none;width:34px;height:34px;border-radius:11px;background:#fdecea;color:#d9534f;font-style:normal;font-weight:900;display:flex;align-items:center;justify-content:center;animation:seBlink 2.4s ease-in-out infinite}\n.hyh .hse-signs div:nth-child(2n) i{animation-delay:.6s}.hyh .hse-signs div:nth-child(3n) i{animation-delay:1.2s}\n@keyframes seBlink{0%,100%{box-shadow:0 0 0 0 rgba(217,83,79,.35)}50%{box-shadow:0 0 0 8px rgba(217,83,79,0)}}\n.hyh .hse-st{list-style:none;margin:0;padding:0;display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:14px;counter-reset:s;position:relative}\n.hyh .hse-st:before{content:\"\";position:absolute;top:26px;inset-inline:10%;height:3px;border-radius:3px;background:repeating-linear-gradient(90deg,#d9534f 0 10px,transparent 10px 18px);opacity:.45}\n.hyh .hse-st li{counter-increment:s;position:relative;text-align:center}\n.hyh .hse-st li:before{content:counter(s);display:flex;align-items:center;justify-content:center;width:52px;height:52px;margin:0 auto 12px;border-radius:50%;background:#fff;border:4px solid #d9534f;color:#d9534f;font-weight:800;font-size:19px;position:relative;transition:transform .25s}\n.hyh .hse-st li:last-child:before{border-color:#1f8a4c;color:#1f8a4c}\n.hyh .hse-st li:hover:before{transform:scale(1.1)}\n.hyh .hse-st b{display:block;color:var(--n);font-size:16px;margin-bottom:6px}\n.hyh .hse-st span{font-size:14px;color:var(--t);line-height:1.7;display:block}\n.hyh .hse-how{display:grid;grid-template-columns:minmax(0,.9fr) minmax(0,1.1fr);gap:28px;align-items:center}\n.hyh .hse-how>div>p{font-size:15.5px;color:var(--t);line-height:1.85;margin:8px 0 0}\n.hyh .hse-ly{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:12px;counter-reset:l}\n.hyh .hse-ly li{counter-increment:l;position:relative;background:#fff;border:1px solid var(--br);border-inline-start:5px solid var(--a,#1557b0);border-radius:16px;padding:14px 16px 14px 18px;box-shadow:0 8px 20px rgba(11,42,85,.05);animation:seIn .6s ease both}\n.hyh .hse-ly li:nth-child(2){animation-delay:.12s}.hyh .hse-ly li:nth-child(3){animation-delay:.24s}.hyh .hse-ly li:nth-child(4){animation-delay:.36s}\n@keyframes seIn{from{opacity:0;transform:translateX(14px)}to{opacity:1;transform:none}}\n.hyh .hse-ly b{display:flex;align-items:center;gap:8px;color:var(--n);font-size:16px;margin-bottom:4px}\n.hyh .hse-ly b:before{content:counter(l);width:24px;height:24px;border-radius:8px;background:var(--a,#1557b0);color:#fff;font-size:13px;display:flex;align-items:center;justify-content:center}\n.hyh .hse-ly span{font-size:14.5px;color:var(--t);line-height:1.7}\n.hyh .hse-tips{list-style:none;margin:0;padding:0;display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:14px;counter-reset:t}\n.hyh .hse-tips li{counter-increment:t;background:#fff;border:1px solid var(--br);border-radius:20px;padding:18px;display:flex;flex-direction:column;gap:6px;transition:transform .25s,box-shadow .25s}\n.hyh .hse-tips li:hover{transform:translateY(-5px);box-shadow:0 16px 36px rgba(11,42,85,.1)}\n.hyh .hse-tips li:before{content:counter(t,decimal-leading-zero);font:800 26px\/1 Arial,sans-serif;color:var(--a,#1557b0);opacity:.85}\n.hyh .hse-tips b{color:var(--n);font-size:16px}.hyh .hse-tips span{font-size:14px;color:var(--t);line-height:1.7}\n.hyh .hse-tm{margin:0;display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:12px}\n.hyh .hse-tm div{background:#0b2a55;border-radius:16px;padding:16px;transition:transform .25s}\n.hyh .hse-tm div:hover{transform:translateY(-4px)}\n.hyh .hse-tm dt{color:#ffc06e;font-weight:800;font-size:15px;margin-bottom:6px}\n.hyh .hse-tm dd{margin:0;color:#c7d4ea;font-size:13.5px;line-height:1.7}\n.hyh .hse-lv{display:grid;grid-template-columns:1fr 1fr;gap:16px}\n.hyh .hse-lv>div{border-radius:22px;padding:22px;background:#fff;border:1px solid var(--br)}\n.hyh .hse-lv>div:last-child{background:#0b2a55;color:#c7d4ea;border-color:#0b2a55}\n.hyh .hse-lv h3{margin:0 0 8px;font-size:19px;color:var(--n)}.hyh .hse-lv>div:last-child h3{color:#fff}\n.hyh .hse-lv p{margin:0 0 12px;font-size:14.5px;line-height:1.8}\n.hyh .hse-lv a{font-weight:800;color:#1557b0}.hyh .hse-lv>div:last-child a{color:#ffc06e}\n.hyh .hse-more{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:12px}\n.hyh .hse-more a{display:flex;flex-direction:column;gap:6px;background:#fff;border:1px solid var(--br);border-radius:18px;padding:16px;color:var(--n);transition:transform .25s,border-color .25s,box-shadow .25s}\n.hyh .hse-more a:hover{transform:translateY(-4px);border-color:#cfe2fb;box-shadow:0 14px 30px rgba(11,42,85,.1)}\n.hyh .hse-more small{direction:ltr;align-self:flex-start;font:800 11px\/1 Consolas,monospace;color:#fff;background:var(--k,#1557b0);border-radius:7px;padding:5px 7px}\n.hyh .hse-more b{font-size:15px}.hyh .hse-more span{font-size:13px;color:var(--m);font-weight:700}\n@supports (animation-timeline:view()){.hyh .hse-rv>*{animation:seRv linear both;animation-timeline:view();animation-range:entry 0% cover 22%}}\n@keyframes seRv{from{opacity:0;translate:0 26px}to{opacity:1;translate:0 0}}\n@media (prefers-reduced-motion:reduce){.hyh .hse-signs i,.hyh .hse-ly li,.hyh .hse-rv>*{animation:none!important;opacity:1}}\n@media (max-width:1100px){.hyh .hse-tm{grid-template-columns:1fr 1fr}.hyh .hse-st{grid-template-columns:1fr 1fr;row-gap:24px}.hyh .hse-st:before{display:none}.hyh .hse-signs,.hyh .hse-tips{grid-template-columns:1fr 1fr}.hyh .hse-how{grid-template-columns:1fr}.hyh .hse-more{grid-template-columns:repeat(3,minmax(0,1fr))}}\n@media (max-width:640px){.hyh .hse-tm,.hyh .hse-signs,.hyh .hse-tips,.hyh .hse-lv{grid-template-columns:1fr}.hyh .hse-more{grid-template-columns:1fr 1fr}}\n\n\/*hyh-en*\/\n.hyh.hyh-en{direction:ltr;text-align:left}\n.hyh-en .hyh-dom input[type=text]{text-align:left}\n.hyh-en .hyh-dom select{flex:0 0 178px!important;width:178px!important;border-right:0!important;border-left:1px solid #d5dfeb!important}\n.hyh-en .hyh-sun{left:auto;right:40px}\n.hyh-en .hyh-ring{left:auto;right:-100px}\n.hyh-en .hyh-card{right:auto;left:0}\n.hyh-en.hyh-facts .f{border-left:0;border-right:1px solid var(--br)}\n.hyh-en.hyh-facts .f:first-child{padding-right:24px;padding-left:0}\n.hyh-en.hyh-facts .f:last-child{border-right:0}\n.hyh-en .cta:before{left:auto;right:-60px}\n.hyh-en .cta .acts{margin-left:0;margin-right:180px}\n.hyh-en .mq-t{animation-name:hyhmqen}\n@keyframes hyhmqen{from{transform:translateX(0)}to{transform:translateX(calc(-50% - 12px))}}\n.hyh-en .mq blockquote,.hyh-en .mq figcaption{unicode-bidi:plaintext}\n.hyh-en .about2 .hy-tldr{border-right:0!important;border-left:4px solid #1557b0!important;text-align:left}\n.hyh-en .faq summary:after{margin-left:12px}\n@media (max-width:1024px){.hyh-en .cta .acts{margin-right:0}}\n@media (max-width:640px){.hyh-en .hyh-dom select{flex:0 0 136px!important;width:136px!important;font-size:14px}.hyh-en .hyh-dom input[type=text]{flex:1 1 0;min-width:0}.hyh-en .hyh-sun{left:auto;right:-30px}.hyh-en .hyh-card{left:0}.hyh-en.hyh-facts .f{padding:16px 12px}}\n<\/style>\n<section class=\"hyh hyh-en hyh-hero\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"txt\"><div class=\"hse-crumb\"><a href=\"https:\/\/www.hyyat.com\/en\/server-management\/\">Server management<\/a><span>\/<\/span><span>Security<\/span><\/div><h1>Web Application Firewall (WAF): What It Is and When Your Site Needs One<\/h1><p class=\"lead\">A web application firewall (WAF) inspects visitor requests before they reach your site and stops known injection and attack attempts. This page explains how it differs from a server firewall, the attacks it blocks, the protection layers on Hyyat Host servers, and how to add a WAF to your site when needed.<\/p><div class=\"acts\" style=\"display:flex;gap:12px;flex-wrap:wrap\"><a class=\"btn btn-o\" href=\"https:\/\/www.hyyat.com\/en\/server-management\/\">Server management service<\/a><a class=\"btn btn-b\" href=\"https:\/\/wa.me\/966509683461?text=Hello%2C%20I%20have%20a%20question%20about%20server%20security%3A%20WAF\" target=\"_blank\" rel=\"noopener\">Ask our support team<\/a><\/div><nav class=\"hse-nav\" aria-label=\"Security pages\"><a href=\"https:\/\/www.hyyat.com\/en\/malware-detection\/\">Malware<\/a><a href=\"https:\/\/www.hyyat.com\/en\/dos-detection\/\">DoS attacks<\/a><a href=\"https:\/\/www.hyyat.com\/en\/log-analysis\/\">Brute force<\/a><a class=\"on\" aria-current=\"page\" href=\"https:\/\/www.hyyat.com\/en\/waf\/\">WAF<\/a><a href=\"https:\/\/www.hyyat.com\/en\/honeypots\/\">Honeypots<\/a><a href=\"https:\/\/www.hyyat.com\/en\/realtime-ip-reputation\/\">IP reputation<\/a><\/nav><\/div><div class=\"hyh-vis\"><svg class=\"hyb-art hse-hero\" direction=\"ltr\" style=\"direction:ltr\" viewBox=\"0 0 560 440\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" role=\"img\" aria-label=\"A server protected by a shield: red attacking dots stop at the shield while green legitimate ones pass\" focusable=\"false\"><defs><filter id=\"seF\" x=\"-30%\" y=\"-30%\" width=\"160%\" height=\"170%\"><feDropShadow dx=\"0\" dy=\"8\" stdDeviation=\"9\" flood-color=\"#0b2a55\" flood-opacity=\".16\"\/><\/filter><\/defs><style>.hse-hero .bad{animation:seBad 3s ease-in infinite}.hse-hero .ok{animation:seOk 3s ease-in infinite}.hse-hero .ring{transform-box:fill-box;transform-origin:center;animation:seRing 3s ease-in-out infinite}.hse-hero .zap{opacity:0;animation:seZap 3s ease-out infinite}.hse-hero .led{animation:seLed 1.2s steps(2) infinite}.hse-hero .fl{animation:seFl 5s ease-in-out infinite}@keyframes seBad{0%{transform:translateX(0);opacity:0}10%{opacity:1}55%{transform:translateX(225px);opacity:1}62%,100%{transform:translateX(232px);opacity:0}}@keyframes seOk{0%{transform:translateX(0);opacity:0}10%{opacity:1}80%{transform:translateX(320px);opacity:1}90%,100%{transform:translateX(330px);opacity:0}}@keyframes seRing{0%,50%,100%{transform:scale(1)}56%{transform:scale(1.06)}}@keyframes seZap{0%,52%{opacity:0}56%{opacity:1}70%,100%{opacity:0}}@keyframes seLed{50%{opacity:.25}}@keyframes seFl{0%,100%{transform:translateY(0)}50%{transform:translateY(-6px)}}@media (prefers-reduced-motion:reduce){.hse-hero *{animation:none!important}.hse-hero .bad,.hse-hero .ok{opacity:0}}<\/style><circle cx=\"300\" cy=\"220\" r=\"196\" fill=\"#f0f6fd\"\/><g stroke=\"#cfe2fb\" stroke-width=\"2\" stroke-dasharray=\"4 8\"><path d=\"M40 120H360M40 170H360M40 220H360M40 270H360M40 320H360\"\/><\/g><circle class=\"bad\" style=\"animation-delay:0s\" cx=\"40\" cy=\"120\" r=\"8\" fill=\"#d9534f\"\/><circle class=\"bad\" style=\"animation-delay:0.6s\" cx=\"40\" cy=\"170\" r=\"8\" fill=\"#d9534f\"\/><circle class=\"ok\" style=\"animation-delay:1.2s\" cx=\"40\" cy=\"220\" r=\"8\" fill=\"#1f8a4c\"\/><circle class=\"bad\" style=\"animation-delay:1.8s\" cx=\"40\" cy=\"270\" r=\"8\" fill=\"#d9534f\"\/><circle class=\"bad\" style=\"animation-delay:2.4s\" cx=\"40\" cy=\"320\" r=\"8\" fill=\"#d9534f\"\/><g class=\"ring\"><path d=\"M262 90c18 22 30 80 30 130s-12 108-30 130\" fill=\"none\" stroke=\"#0e4a9e\" stroke-width=\"12\" stroke-linecap=\"round\" opacity=\".9\"\/><path d=\"M276 104c12 20 20 70 20 116s-8 96-20 116\" fill=\"none\" stroke=\"#fff\" stroke-width=\"3\" stroke-linecap=\"round\" opacity=\".7\"\/><\/g><g class=\"zap\"><circle cx=\"272\" cy=\"170\" r=\"14\" fill=\"#d9534f\" opacity=\".25\"\/><circle cx=\"272\" cy=\"270\" r=\"14\" fill=\"#d9534f\" opacity=\".25\"\/><circle cx=\"272\" cy=\"120\" r=\"12\" fill=\"#d9534f\" opacity=\".2\"\/><circle cx=\"272\" cy=\"320\" r=\"12\" fill=\"#d9534f\" opacity=\".2\"\/><\/g><g filter=\"url(#seF)\"><rect x=\"360\" y=\"96\" width=\"150\" height=\"248\" rx=\"18\" fill=\"#0b2a55\"\/><\/g><g fill=\"#173f78\"><rect x=\"376\" y=\"114\" width=\"118\" height=\"46\" rx=\"8\"\/><rect x=\"376\" y=\"170\" width=\"118\" height=\"46\" rx=\"8\"\/><rect x=\"376\" y=\"226\" width=\"118\" height=\"46\" rx=\"8\"\/><rect x=\"376\" y=\"282\" width=\"118\" height=\"46\" rx=\"8\"\/><\/g><g fill=\"#6aa6ef\"><rect x=\"388\" y=\"132\" width=\"56\" height=\"8\" rx=\"4\"\/><rect x=\"388\" y=\"188\" width=\"56\" height=\"8\" rx=\"4\"\/><rect x=\"388\" y=\"244\" width=\"56\" height=\"8\" rx=\"4\"\/><rect x=\"388\" y=\"300\" width=\"56\" height=\"8\" rx=\"4\"\/><\/g><g class=\"led\" fill=\"#8cc63f\"><circle cx=\"476\" cy=\"137\" r=\"5\"\/><circle cx=\"476\" cy=\"193\" r=\"5\"\/><circle cx=\"476\" cy=\"249\" r=\"5\"\/><circle cx=\"476\" cy=\"305\" r=\"5\"\/><\/g><g class=\"fl\"><g filter=\"url(#seF)\"><rect x=\"40\" y=\"26\" width=\"87.6\" height=\"44\" rx=\"14\" fill=\"#fff\"\/><\/g><path d=\"M62 36l14 5v9c0 8-6 13-14 16-8-3-14-8-14-16v-9z\" fill=\"#0e4a9e\"\/><path d=\"M56 49l4 4 8-8\" fill=\"none\" stroke=\"#fff\" stroke-width=\"2.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><text x=\"86\" y=\"54\" font-family=\"Arial,sans-serif\" font-size=\"15\" font-weight=\"800\" fill=\"#0b2a55\">WAF<\/text><\/g><g class=\"fl\" style=\"animation-delay:1.5s\"><g filter=\"url(#seF)\"><rect x=\"330\" y=\"364\" width=\"200\" height=\"44\" rx=\"22\" fill=\"#fff\"\/><\/g><circle cx=\"354\" cy=\"386\" r=\"11\" fill=\"#1f8a4c\"\/><path d=\"M349 386l3.5 3.5 6-7\" fill=\"none\" stroke=\"#fff\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><text x=\"374\" y=\"391\" font-family=\"Arial,sans-serif\" font-size=\"13\" font-weight=\"800\" fill=\"#0b2a55\">CSF \u00b7 LFD \u00b7 ImunifyAV<\/text><\/g><\/svg><\/div><\/div><\/section><section class=\"hyh hyh-en hyh-facts\"><div class=\"w\"><div class=\"f\"><b>CSF firewall<\/b><span>network and port protection<\/span><\/div><div class=\"f\"><b>ImunifyAV<\/b><span>file scanning<\/span><\/div><div class=\"f\"><b>WAF<\/b><span>site request protection<\/span><\/div><div class=\"f\"><b>Layers<\/b><span>working together<\/span><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-5eb888c elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"5eb888c\" data-element_type=\"section\" data-e-type=\"section\" id=\"overview\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ef8840f\" data-id=\"ef8840f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a818799 elementor-widget elementor-widget-html\" data-id=\"a818799\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hyb-about hse-rv\"><div class=\"txt\"><h2>What is a web application firewall (WAF)?<\/h2><p>A <strong>WAF<\/strong> is a filter between the visitor and your site that inspects every HTTP request: links, forms and submitted data, and blocks requests carrying known attack patterns.<\/p><p>It differs from a server firewall like CSF, which works at network level and decides who reaches which port. The server firewall closes doors; a WAF inspects what comes through the open door, your site pages themselves.<\/p><\/div><div class=\"hy-tldr\"><p><strong>In short:<\/strong> A WAF inspects visitor requests and stops attacks such as SQL injection and XSS. On Hyyat Host servers CSF protects the network and ImunifyAV scans files, and you can add a WAF to your site via a security plugin or a cloud service.<\/p><\/div><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-19c13ab elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"19c13ab\" data-element_type=\"section\" data-e-type=\"section\" id=\"signs\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0825ef4\" data-id=\"0825ef4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-30a80d3 elementor-widget elementor-widget-html\" data-id=\"30a80d3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>Attacks a WAF blocks<\/h2><\/div><div class=\"hse-signs hse-rv\"><div><i aria-hidden=\"true\">!<\/i><span>SQL injection to steal the database<\/span><\/div><div><i aria-hidden=\"true\">!<\/i><span>XSS to plant scripts in your pages<\/span><\/div><div><i aria-hidden=\"true\">!<\/i><span>LFI and RFI file inclusion<\/span><\/div><div><i aria-hidden=\"true\">!<\/i><span>Directory traversal<\/span><\/div><div><i aria-hidden=\"true\">!<\/i><span>Exploits of known plugin flaws<\/span><\/div><div><i aria-hidden=\"true\">!<\/i><span>Malicious bots scanning your site<\/span><\/div><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-5871f3e elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"5871f3e\" data-element_type=\"section\" data-e-type=\"section\" id=\"stages\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d7b17c3\" data-id=\"d7b17c3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-29a4d63 elementor-widget elementor-widget-html\" data-id=\"29a4d63\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>How a WAF works: 4 steps<\/h2><p>Understanding the stages of an attack helps you stop it early, before it reaches your data and visitors.<\/p><\/div><ol class=\"hse-st hse-rv\"><li><b>Receiving the request<\/b><span>The visitor request reaches the WAF before your site, whether opening a page or submitting a form.<\/span><\/li><li><b>Inspection<\/b><span>It compares the link and submitted data to rules describing known attack patterns.<\/span><\/li><li><b>Decision<\/b><span>It passes clean requests and blocks suspicious ones or asks for extra verification.<\/span><\/li><li><b>Logging<\/b><span>It logs blocked requests, so you learn what attackers target on your site.<\/span><\/li><\/ol><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-4676b55 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"4676b55\" data-element_type=\"section\" data-e-type=\"section\" id=\"protection\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-eba0451\" data-id=\"eba0451\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b6971a1 elementor-widget elementor-widget-html\" data-id=\"b6971a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hse-how\"><div class=\"hse-rv\"><h2>Protection layers on Hyyat Host servers<\/h2><p>Good protection is layered. This is what runs on our servers, and what you add for your site:<\/p><p>These tools run on our hosting servers and on servers we protect under the server management service.<\/p><\/div><ol class=\"hse-ly\"><li><b>CSF network firewall<\/b><span>Closes unused ports, limits connections and blocks abusive addresses before they reach your services.<\/span><\/li><li><b>LFD against guessing<\/b><span>Automatically blocks addresses that repeat failed logins on server services.<\/span><\/li><li><b>ImunifyAV for files<\/b><span>If an attack manages to plant a malicious file, scanning against updated signatures detects it.<\/span><\/li><li><b>A WAF for your site<\/b><span>Add an application firewall via a WordPress security plugin or a cloud service in front of your site; for your own server, contact us for a recommendation.<\/span><\/li><\/ol><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-009beb7 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"009beb7\" data-element_type=\"section\" data-e-type=\"section\" id=\"tips\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-abc1525\" data-id=\"abc1525\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5a90718 elementor-widget elementor-widget-html\" data-id=\"5a90718\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>How to choose a WAF for your site<\/h2><p>Server protection is half the way; the other half is in your hands. These simple steps make a big difference.<\/p><\/div><ol class=\"hse-tips hse-rv\"><li><b>WordPress<\/b><span>Well-known security plugins include an application firewall that runs inside the site with updated rules.<\/span><\/li><li><b>Cloud WAF<\/b><span>Many CDN services offer a WAF that inspects requests before they reach the server.<\/span><\/li><li><b>Start in monitoring mode<\/b><span>Run rules in monitor mode first so you do not block real visitors by mistake.<\/span><\/li><li><b>Keep rules updated<\/b><span>A WAF is only as good as its rules; choose one that updates them constantly.<\/span><\/li><li><b>Do not rely on it alone<\/b><span>A WAF does not replace plugin updates and strong passwords.<\/span><\/li><li><b>Review the logs<\/b><span>WAF logs tell you what attackers are targeting on your site.<\/span><\/li><\/ol><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-b7817f2 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"b7817f2\" data-element_type=\"section\" data-e-type=\"section\" id=\"terms\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a06791c\" data-id=\"a06791c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f142283 elementor-widget elementor-widget-html\" data-id=\"f142283\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>Terms worth knowing<\/h2><\/div><dl class=\"hse-tm hse-rv\"><div><dt>SQL injection<\/dt><dd>Injecting database commands into site fields to steal or alter data.<\/dd><\/div><div><dt>XSS<\/dt><dd>Planting a malicious script in site pages to run in visitors browsers and steal their sessions.<\/dd><\/div><div><dt>LFI and RFI<\/dt><dd>Exploiting a flaw to include and run a local or remote file inside the site.<\/dd><\/div><div><dt>ModSecurity<\/dt><dd>An open-source WAF engine that works with web servers using rules that describe attacks.<\/dd><\/div><div><dt>Network firewall<\/dt><dd>A firewall like CSF that controls ports and connections but does not inspect site page content.<\/dd><\/div><\/dl><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-6ea8c5d elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"6ea8c5d\" data-element_type=\"section\" data-e-type=\"section\" id=\"responsibility\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7b577f5\" data-id=\"7b577f5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3038dbb elementor-widget elementor-widget-html\" data-id=\"3038dbb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>Who is responsible for protecting your server?<\/h2><\/div><div class=\"hse-lv hse-rv\"><div><h3>Shared and WordPress hosting<\/h3><p>We manage server protection fully: the CSF firewall, LFD blocking, ImunifyAV scanning and mail filtering. You keep your site updated and your passwords safe.<\/p><a href=\"https:\/\/www.hyyat.com\/en\/shared-hosting-2\/\">Shared hosting \u2192<\/a><\/div><div><h3>VPS and dedicated servers<\/h3><p>The server is fully yours, and its protection is your responsibility unless you subscribe to server management, where we install, tune and monitor the protection tools.<\/p><a href=\"https:\/\/www.hyyat.com\/en\/server-management\/\">Server management \u2192<\/a> \u00b7 <a href=\"https:\/\/www.hyyat.com\/en\/vps-hosting\/\">VPS<\/a> \u00b7 <a href=\"https:\/\/www.hyyat.com\/en\/dedicated-server\/\">Dedicated servers<\/a><\/div><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-2ab6c1a elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"2ab6c1a\" data-element_type=\"section\" data-e-type=\"section\" id=\"more\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7ab78a1\" data-id=\"7ab78a1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5d7ee8b elementor-widget elementor-widget-html\" data-id=\"5d7ee8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"hd hd-c hse-rv\"><h2>More security pages<\/h2><p>Each page explains one type of attack and how we deal with it.<\/p><\/div><div class=\"hse-more hse-rv\"><a href=\"https:\/\/www.hyyat.com\/en\/malware-detection\/\" style=\"--k:#d9534f\"><small>MALWARE<\/small><b>Malware<\/b><span>Read more \u2192<\/span><\/a><a href=\"https:\/\/www.hyyat.com\/en\/dos-detection\/\" style=\"--k:#e8850f\"><small>DoS<\/small><b>DoS attacks<\/b><span>Read more \u2192<\/span><\/a><a href=\"https:\/\/www.hyyat.com\/en\/log-analysis\/\" style=\"--k:#1557b0\"><small>BRUTE FORCE<\/small><b>Brute force<\/b><span>Read more \u2192<\/span><\/a><a href=\"https:\/\/www.hyyat.com\/en\/honeypots\/\" style=\"--k:#c77700\"><small>HONEYPOT<\/small><b>Honeypots<\/b><span>Read more \u2192<\/span><\/a><a href=\"https:\/\/www.hyyat.com\/en\/realtime-ip-reputation\/\" style=\"--k:#1f8a4c\"><small>IP REPUTATION<\/small><b>IP reputation<\/b><span>Read more \u2192<\/span><\/a><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-1a81978c elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"1a81978c\" data-element_type=\"section\" data-e-type=\"section\" id=\"faq\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e7a8769\" data-id=\"e7a8769\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b776ff9 elementor-widget elementor-widget-html\" data-id=\"b776ff9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w two\"><div class=\"side\"><h2>Frequently asked questions<\/h2><p>Did not find your answer? <a href=\"https:\/\/wa.me\/966509683461?text=Hello%2C%20I%20have%20a%20question%20about%20server%20security%3A%20WAF\" target=\"_blank\" rel=\"noopener\">Ask us on WhatsApp<\/a> or visit the <a href=\"https:\/\/www.hyyat.com\/en\/customer-service-center\/\">customer service center<\/a>.<\/p><\/div><div class=\"faq\"><details><summary><span>What is a web application firewall (WAF)?<\/span><\/summary><p>A firewall that inspects the content of visitor requests to your site and blocks requests with known attack patterns such as SQL injection and XSS.<\/p><\/details><details><summary><span>How is a WAF different from a server firewall?<\/span><\/summary><p>A server firewall like CSF works at network level and controls who reaches which port, while a WAF inspects the content of site requests.<\/p><\/details><details><summary><span>What protection runs on Hyyat Host servers?<\/span><\/summary><p>The CSF firewall for network and ports, LFD to block repeated login attempts, and ImunifyAV to scan files for malware.<\/p><\/details><details><summary><span>How do I add a WAF to a WordPress site?<\/span><\/summary><p>Through a well-known security plugin with an application firewall, or a CDN service offering a cloud WAF in front of your site.<\/p><\/details><details><summary><span>Does a WAF replace updating plugins?<\/span><\/summary><p>No, it is an extra layer. Updating WordPress and plugins and using strong passwords remain the foundation.<\/p><\/details><details><summary><span>Can a WAF be installed on my own server?<\/span><\/summary><p>Contact us through the server management service so we can study your server needs and suggest the right solution.<\/p><\/details><details><summary><span>What is the difference between a website firewall and security plugins?<\/span><\/summary><p>A website firewall (WAF) is part of many security plugins, and some plugins add file scanning and login protection on top.<\/p><\/details><details><summary><span>Does a WAF slow my site?<\/span><\/summary><p>Inspection adds very little time, and a cloud WAF may even speed the site up because it works with a CDN.<\/p><\/details><\/div><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-071d43e elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"071d43e\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-fdabd0d\" data-id=\"fdabd0d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1dd2c60 elementor-widget elementor-widget-html\" data-id=\"1dd2c60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<section class=\"hyh hyh-en hyh-sec\" style=\"--a:#0e4a9e\"><div class=\"w\"><div class=\"cta\"><div><h2>Want someone to handle your server security?<\/h2><p>With server management we install, tune and monitor the protection tools, so you can focus on your business.<\/p><\/div><div class=\"acts\"><a class=\"btn btn-o\" href=\"https:\/\/www.hyyat.com\/en\/server-management\/\">Server management<\/a><a class=\"btn btn-wa\" href=\"https:\/\/wa.me\/966509683461?text=Hello%2C%20I%20have%20a%20question%20about%20server%20security%3A%20WAF\" target=\"_blank\" rel=\"noopener\">Chat on WhatsApp<\/a><\/div><\/div><\/div><div class=\"hyh-end\"><\/div><\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Server management\/Security Web Application Firewall (WAF): What It Is and When Your Site Needs One A web application firewall (WAF) inspects visitor requests before they reach your site and stops known injection and attack attempts. This page explains how it differs from a server firewall, the attacks it blocks, the protection layers on Hyyat Host [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"full-page-no-boxed.php","meta":{"inline_featured_image":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"class_list":["post-13005","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/pages\/13005","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=13005"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/pages\/13005\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=13005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}