Per-site adaptation
The same rule carries different exclusions per site — no manual tuning.
Adaptive WAF
Nodes profile each site and exclude false positives automatically; intelligence from every control plane is merged into the official rule library and delivered back.
The same rule carries different exclusions per site — no manual tuning.
Learning, observation and suggestion modes are free.
Rule updates are signed and applied by the control plane automatically.
Edge virtual patches for PHP2Shell (CVE-2026-109618/109619) and other critical PHP flaws are built in and on by default; switch them off or tune thresholds per site. Edge blocking mitigates; upgrading PHP is still required.
Applying suggestions automatically is part of the paid “automatic mitigation” module.