A Web application firewall (WAF) is designed to protect Web applications against common attacks. WAFs sit between the Web client and Web server, analyzing application-layer traffic for violations. Some traditional firewalls provide a degree of application awareness, not with the granularity and specificity WAF provides. The market is still undefined, with many dissimilar products falling under the WAF umbrella. The Open Web Application Security Project (OWASP) suggests the following selection of criteria for a WAF.”]