Part of the Sovereign Stack · Family: Protect

Web App Shield · Thales Imperva

Filter suspicious traffic before it reaches your website or online shop. ALT-F1 sets up and operates the protection using Thales Imperva.

What Web App Shield protects

How it works

  1. Route visitors through the protection service using the agreed domain-name settings.
  2. Check requests and apply the rules configured for your website.
  3. Review events and adjust the rules as your website and traffic change.

Scroll sideways to read the full drawing.

The internetyour customers a bot copying prices, trying stolen passwords an attacker probing a known flaw a flood of fake visits (DDoS) website traffic protection Imperva Cloud WAFbetween visitors and your application DNS and certificates checked before rollout Your serverswherever they are hostedwebsiteshopAPIrestrict direct server access in the agreed design watched from EuropeALT-F1 reviews events and adjusts the rules included in your service level The internetwebsite traffic protectionYour serverswatched from Europe
The steps above explain this drawing. Terms are described below.

Check website traffic before it reaches your business.

Visitors and requests
  • Customers and partners
  • Automated traffic
  • Attempts to exploit a flaw
Web App Shield
  • Thales Imperva filtering
  • Rules for your website
  • Traffic floods and bot controls
Your website and shop
  • Allowed requests reach the site
  • Direct server access reviewed
  • Useful alerts for your team

ALT-F1 configures the protection and reviews the events in your service scope.

WAF
Web Application Firewall. Checks web requests and applies the configured filtering rules.
DDoS
Distributed Denial of Service. A traffic-flood attack; protection and commitments depend on the selected service.
Bots
Programs that automate web activity; rules distinguish permitted and unwanted uses.
Virtual patching
Filtering intended to reduce exposure while the underlying software issue is fixed.
API
Application Programming Interface. The connection applications use to exchange requests and information.
DNS
Domain Name System. Domain-name settings used to route visitors through the protection.

Four types of protection

  • Website request filtering: checks requests for signs of an application attack.
  • Traffic-flood protection: helps keep services available during distributed denial-of-service (DDoS) attacks. The applicable service agreement defines the scope.
  • Bot controls: distinguish useful automation from activities such as price scraping or repeated stolen-password attempts.
  • API protection: checks the connections used by applications and partners to exchange information.

How traffic reaches your website

Visitors first connect to the protection service. Requests allowed by its rules then reach your application server. We also check how the origin server can be restricted so visitors cannot simply bypass that route.

A domain-name-system (DNS) change is part of onboarding. Certificates, access to your domain and existing delivery services must be checked first; the rollout plan determines the timing.

Filtering can reduce exposure while developers fix a vulnerability. It does not replace software updates or guarantee that every attack will be detected.

What ALT-F1 manages

We set up the account, configure the agreed protection, review events and tune rules. We explain the reports in French, Dutch or English and connect your existing tools where included.

The website attack film presents an observed week of activity. Its figures describe that example, not the traffic or outcome every website will experience.

Reports and security reviews

Reports can support discussions with your management, insurer or auditor. We agree the evidence and service scope you need; a product or report alone does not establish compliance with a regulation.

Ask about a 14-day trial on one site when requesting your quote.

Technical details

For IT people: web application firewall (WAF), DDoS and bot protection, API security — powered by Thales Imperva.

Service levels

FeatureEssentialBusiness (recommended)Enterprise
Cloud WAF (OWASP Top 10, virtual patching)✓✓✓
DDoS protection with SLA✓✓✓
Advanced bot protection—✓✓
Monthly rule tuning by ALT-F1—✓✓
API discovery and schema enforcement——✓
PriceOn request — depends on how many devices, sites or people you have. Ask for a quote.

Training for your team

Length
Half a day
For whom
IT teams, website owners and agencies
On the programme
Read website alerts and agree practical response steps.

Workshops →

Related security topics

Explore the practical measures and references related to this service.

Get a quote

Acronyms used here: WAF, DDoS, API, DNS, OWASP, SLA
WAF — Web Application Firewall
A filter that checks requests to your website and blocks suspicious ones before they reach the application.
DDoS — Distributed Denial of Service
An attack that uses many sources to overwhelm a website or service with traffic.
API — Application Programming Interface
An agreed way for one application to request data or actions from another application.
DNS — Domain Name System
Connects a name such as alt-f1.be to the address of the service a visitor needs to reach.
OWASP — Open Worldwide Application Security Project
A nonprofit foundation that publishes practical resources about software security, including the Top 10 risk list.
SLA — Service Level Agreement
The written service commitments agreed with a provider, such as availability or response arrangements.

All acronyms and explanations →