A WAF can protect against common cyberattacks, including SQL injection attacks, cross-site scripting (XSS) attacks, and distributed denial of service (DDoS) attacks.