Azure Web Application Firewall
Gain powerful protection for web apps and APIs with Azure cloud-native web application firewall (WAF) service.
Overview
Improve security for your web applications
- Actively protect web applications from the Open Web Application Security Project (OWASP) top 10 security risks.
- Defend against malicious bot and DDoS attacks at the network edge and datacenters with custom and managed rule sets.
- Keep an eye on your environment and security alerts with detailed reports on each threat.
- Streamline DevOps processes and increase your security posture.
FEATURES
Simple yet powerful protection
Protect web apps with managed rule sets
Increase security, reduce false positives, and improve performance with the Azure Web Application Firewall detection engine combined with updated rule sets.
Deploy easily with no additional software agent required
Centrally define and customize rules to meet your security requirements, then apply them to protect all your web apps.
Get insight into security and analytics
Combine Microsoft Sentinel with Azure Web Application Firewall to easily break down and view your WAF data.
Enforce organizational compliance at scale
Use Azure Policy to help enforce organizational standards and assess compliance at scale for Web Application Firewall resources.
Improve security and performance at the edge
Gain advanced security, scalability, and accelerated delivery of apps, files, and content using Azure Front Door.
Monitor security alerts and logs
Track diagnostic information including security alerts and logs that provide detailed reporting on detected threats with Azure Monitor.
SECURITY
Built-in security and compliance
Microsoft has committed to investing $20 billion in cybersecurity over five years.
We employ more than 8,500 security and threat intelligence experts across 77 countries.
Azure has one of the largest compliance certification portfolios in the industry.
PRICING
Azure Web Application Firewall
There are no upfront costs to use Azure Web Application Firewall—pay for only what you use. No pre-commitment required.
Plan for your networking and network security needs
Build a secure, performant, and cost-effective networking solution for your business needs.
CUSTOMER STORIES
See how customers innovate with Azure
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=174&hei=75&qlt=100&fit=constrain){kind=logo}
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=1312&hei=1058&qlt=100&fit=constrain)
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=160&hei=69&qlt=100&fit=constrain){kind=logo}
RESOURCES
Azure Web Application Firewall resources and documentation
Frequently asked questions
- Azure Web Application Firewall is a cloud-native service that protects your web applications from bot attacks and common web vulnerabilities such as SQL injection and cross-site scripting.
- Yes. Learn how to customize Web Application Firewall rules in the Azure portal.
- Yes. Enable DDoS protection on Azure Virtual Network where Azure Application Gateway is deployed. This ensures that the Azure DDoS protection service also protects the application gateway virtual IP (VIP).
NEXT STEPS
Choose the Azure account that’s right for you
Pay as you go or try Azure free for up to 30 days.
Azure Solutions
Azure cloud solutions
Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
Business Solution Hub
Find the right Microsoft Cloud solution
Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.
Explore Azure Portal 
