Web Application Firewall

T CloudSecurity

L7 web application firewall protecting against OWASP Top 10 risks — SQL injection, XSS, command injection — with managed rule sets, custom rules, IP allow/block lists, and bot-detection heuristics tuned for OTC-hosted apps

Jurisdictional exposure

Provider HQ
EUBonn, Germany

Subject to GDPR, Data Act, DGA

Region locations
EEAEU3 regions across 2 jurisdictions
Sovereign option
Yes — 3 sovereign-flagged regions available

Sub-services (2)

Managed Rule Sets

T-Systems-maintained rules covering OWASP Top 10

Custom Rules

Customer-authored rules for application-specific protection

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

3 regions
3 countries
3sovereign
Sovereign regions (3)
  • EU-DE - Biere / Magdeburg · BiereT Cloud Public Sovereign
  • EU-NL - Amsterdam · AmsterdamT Cloud Public Sovereign
  • EU-CH2 - Switzerland · ZurichT Cloud Public Sovereign (Swiss SKU)

Tags

Equivalent services on other platforms

Alibaba Web Application FirewallAlibaba

Managed WAF protecting web apps from OWASP Top 10 attacks, bot traffic, API abuse, and data scraping, with global and China regional deployment, custom rule engine, and unified consoles across Anti-DDoS and Security Center

AWS WAFAWS

Web application firewall that protects against common exploits with managed rule groups, custom rules, rate-based rules, Bot Control, and CAPTCHA challenges

Azure Application GatewayAzure

Layer 7 load balancer with integrated web application firewall, SSL termination, URL-based routing, cookie-based session affinity, and autoscaling based on traffic

Cloudflare WAFCloudflare

L7 web application firewall protecting against OWASP Top 10 risks with Cloudflare-managed rule sets, custom expression-based rules, exposed-credentials detection, rate-limiting integration, and machine-learning attack-score signals tuned across the global traffic graph

Cloud ArmorGCP

Edge DDoS protection and web application firewall with managed rule sets for OWASP Top 10, adaptive bot protection, and reCAPTCHA Enterprise integration

Huawei Web Application FirewallHuawei

Managed web application firewall with OWASP Top 10 rule sets, bot management, anti-crawler, CC (challenge-collapsar) attack mitigation, custom rule engine, and regional deployment with integrated DDoS protection

OCI Web Application FirewallOracle

Layer-7 protection against OWASP Top 10 attacks (SQLi, XSS, RCE), bot traffic, and DDoS at the application layer. Edge-deployed for global protection or regional for backend-fronted apps.

Pricing

Pricing model:per-domain-per-month