Hosting terms
What is a WAF? A website firewall, explained simply
Key takeaway
A WAF is a web application firewall that checks incoming website requests for signs of common attacks. Lightning Web Hosting includes AWS WAF as part of its platform security, alongside SSL, CloudFront CDN and daily website backups. It is one layer of protection for your business website.
In this guide
What does a WAF do?
WAF stands for web application firewall. It checks requests arriving at a website against a set of rules. Think of it as a checkpoint that can recognise certain patterns before the website handles the request.
For example, an automated tool might send unusual requests looking for a weakness. Firewall rules can recognise harmful patterns and filter unwanted requests. That helps protect the website while allowing genuine customers to use it.
The website threats a host needs to consider
Sources: AWS explanation of a web application firewall (opens in a new tab)
Why does that matter for a small business?
Your website is public, so genuine customers are not its only visitors. Automated requests can arrive even when your business is small. A firewall gives the host another way to inspect that traffic.
The rules need care. A setting that catches unwanted traffic could also affect a real customer’s form submission. Ask how a host tests its rules and handles problems, as well as whether a firewall is present.
Is AWS WAF included with hosting?
AWS WAF is included with both Thunder and Lightning as part of our platform security. You do not need to buy an extra security tier to get this protection.
It works alongside SSL, protected portal accounts, CloudFront delivery and daily AWS website backups. Each part has a different job, giving your business several layers of protection.
Is a WAF the same as a CDN or SSL?
They do different jobs. A WAF checks incoming requests. A CDN helps deliver website content. SSL, usually seen as HTTPS, encrypts the visitor’s connection. Backups help recover files and content after a problem.
The website software and people’s accounts still need care too. With Lightning hosting, platform security, SSL, CloudFront CDN and daily AWS website backups are included in both plans. We explain each part so you know what it does for your business.
See the security included in hostingCompare the plansWhat a CDN doesWhat SSL protects