Here is my opinion: WAF is a tool, use it where it makes sense. Don’t use it where it doesn’t make sense. I’ve seen many use cases where deploying a WAF soluti

Here is my opinion: WAF is a tool, use it where it makes sense. Don’t use it where it doesn’t make sense. I’ve seen many use cases where deploying a WAF solution was completely reasonable and the problem couldn’t have been solved in the application code. And let’s not forget often you have to run applications that were written by other companies, and you still need an additional layer of security. —- These “stop using X” articles are really pointless (and boring). They also misguide the people who have less experience in a particular field.