WAF

Browse prompts in this category.

Prompts

Secure AWS WAF Developer
Configure AWS WAF Web ACLs with AWS Managed Rule Groups (Common/SQLi/KnownBadInputs/IpReputation), custom regex rules, rate-based rules on auth, Bot Control, and S3 logging. Use when protecting ALB/API Gateway/CloudFront.
Secure Cloudflare Security Developer
Configure Cloudflare Managed Ruleset/OWASP CRS WAF, rate limiting, Bot Management, Advanced DDoS, Workers secrets, Access Zero Trust with device posture, Authenticated Origin Pulls, and Full (Strict) TLS. Use when hardening Cloudflare zones.
Secure ModSecurity Developer
Configure ModSecurity with OWASP CRS, anomaly scoring thresholds, paranoia levels, targeted SecRuleUpdateTargetById exclusions, request body limits, and redacted concurrent audit logs. Use when deploying or tuning ModSecurity WAF.