A WAF is a cloud-based firewall service that monitors and protects your website traffic in real time against threats such as SQL injection attacks (malicious data that causes your site to do something it shouldn’t) and DDoS attacks (crashes your site by overwhelming it with a flood of automated traffic). WAF is the front-line defense for your site in between Website Security scans and takes only a few minutes to set up.