--- title: "Web App Shield" description: "Filter suspicious traffic before it reaches your website or online shop. ALT-F1 sets up and operates the protection using Thales Imperva." url: https://www.alt-f1.be/en/web-shield/ organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718) --- # Web App Shield Filter suspicious traffic before it reaches your website or online shop. ALT-F1 sets up and operates the protection using Thales Imperva. ## What Web App Shield protects - Inspect website requests before they reach your application. - Help control traffic floods, harmful bots and attempts to misuse application connections (APIs). - Choose a service level and agree the sites, features and operating responsibilities it covers. ## How it works 1. Route visitors through the protection service using the agreed domain-name settings. 2. Check requests and apply the rules configured for your website. 3. Review events and adjust the rules as your website and traffic change. **Check website traffic before it reaches your business.** ### Visitors and requests - Customers and partners - Automated traffic - Attempts to exploit a flaw ### Web App Shield - Thales Imperva filtering - Rules for your website - Traffic floods and bot controls ### Your website and shop - Allowed requests reach the site - Direct server access reviewed - Useful alerts for your team ALT-F1 configures the protection and reviews the events in your service scope. - **[WAF](https://www.alt-f1.be/en/acronyms/#waf)** — Web Application Firewall. Checks web requests and applies the configured filtering rules. - **[DDoS](https://www.alt-f1.be/en/acronyms/#ddos)** — Distributed Denial of Service. A traffic-flood attack; protection and commitments depend on the selected service. - **Bots** — Programs that automate web activity; rules distinguish permitted and unwanted uses. - **Virtual patching** — Filtering intended to reduce exposure while the underlying software issue is fixed. - **[API](https://www.alt-f1.be/en/acronyms/#api)** — Application Programming Interface. The connection applications use to exchange requests and information. - **[DNS](https://www.alt-f1.be/en/acronyms/#dns)** — Domain Name System. Domain-name settings used to route visitors through the protection. ## Four types of protection - **Website request filtering:** checks requests for signs of an application attack. - **Traffic-flood protection:** helps keep services available during distributed denial-of-service (DDoS) attacks. The applicable service agreement defines the scope. - **Bot controls:** distinguish useful automation from activities such as price scraping or repeated stolen-password attempts. - **API protection:** checks the connections used by applications and partners to exchange information. ## How traffic reaches your website Visitors first connect to the protection service. Requests allowed by its rules then reach your application server. We also check how the origin server can be restricted so visitors cannot simply bypass that route. A domain-name-system (DNS) change is part of onboarding. Certificates, access to your domain and existing delivery services must be checked first; the rollout plan determines the timing. Filtering can reduce exposure while developers fix a vulnerability. It does not replace software updates or guarantee that every attack will be detected. ## What ALT-F1 manages We set up the account, configure the agreed protection, review events and tune rules. We explain the reports in French, Dutch or English and connect your existing tools where included. The [website attack film](/en/film/#attacks-h) presents an observed week of activity. Its figures describe that example, not the traffic or outcome every website will experience. ## Reports and security reviews Reports can support discussions with your management, insurer or auditor. We agree the evidence and service scope you need; a product or report alone does not establish compliance with a regulation. Ask about a 14-day trial on one site when requesting your quote. **Technical details:** For IT people: web application firewall (WAF), DDoS and bot protection, API security — powered by Thales Imperva. ## Service levels - **Essential**: Cloud WAF (OWASP Top 10, virtual patching), DDoS protection with SLA - **Business** (recommended): Cloud WAF (OWASP Top 10, virtual patching), DDoS protection with SLA, Advanced bot protection, Monthly rule tuning by ALT-F1 - **Enterprise**: Cloud WAF (OWASP Top 10, virtual patching), DDoS protection with SLA, Advanced bot protection, Monthly rule tuning by ALT-F1, API discovery and schema enforcement On request — depends on how many devices, sites or people you have. https://www.alt-f1.be/en/quote/ ## Training for your team - Length: Half a day - For whom: IT teams, website owners and agencies - On the programme: Read website alerts and agree practical response steps. ## Connect your tools Connect Web App Shield to the tools your team uses for alerts, investigations and access. A separate technical guide explains the interfaces and setup examples. [Find your tools](https://www.alt-f1.be/en/imperva/integrations.md) · [Technical guide](https://www.alt-f1.be/en/imperva/integration-architecture.md) ## Related security topics - NIS2 [Cybersecurity rules for organisations (NIS2)](https://www.alt-f1.be/en/table/n2.md) - DORA [Digital resilience in finance](https://www.alt-f1.be/en/table/do.md) - VULN [Find and prioritise weaknesses](https://www.alt-f1.be/en/table/vm.md) - INVESTIGATE [Investigate a security incident](https://www.alt-f1.be/en/table/fo.md) - LOGS [Keep useful security records](https://www.alt-f1.be/en/table/lg.md) - ALERTS [Monitor alerts and respond](https://www.alt-f1.be/en/table/so.md) - RESPONSE [Prepare your incident response](https://www.alt-f1.be/en/table/ir.md) - GDPR [Protect personal information](https://www.alt-f1.be/en/table/gd.md) - WEB [Protect websites and shops](https://www.alt-f1.be/en/table/wa.md) - TEST [Test security with permission](https://www.alt-f1.be/en/table/pt.md) - DDoS [Traffic floods and harmful bots](https://www.alt-f1.be/en/table/dd.md) - ATTACKS [Use information about attacks](https://www.alt-f1.be/en/table/ti.md)