> It's more due to the fact that some regulatory or industry standard the enterprise promises to follow requires a WAF to be in place. This is the comment I w

> It's more due to the fact that some regulatory or industry standard the enterprise promises to follow requires a WAF to be in place. This is the comment I was looking for. This is exactly right, most companies do it to check a box for compliance.