A web application firewall (WAF) is a security measure that filters incoming web traffic to identify and block malicious requests and bot-driven attacks.