WAF stands for web application firewall and is a security component that protects web applications from bad actors by analyzing and filtering HTTP traffic. To put everything into perspective, know that standard network firewalls only operate between levels 3 and 4 in the OSI Model, but WAF can operate up to level 7. Also, WAFs understand web application protocols and can analyze HTTP traffic coming to and from a web application.