ICSA Labs Web Application Firewall testing program will evaluate and certify products that implement security policy enforcement for the protection of HTTP and HTTPS web-based applications. Our criteria ensures that WAF products provide essential functionality to secure vital application services from exploitation or attack.

In conjunction with ongoing efforts in the industry to classify and categorize application security issues and mitigate potential vulnerabilities, the Web Application Firewall Certification criteria was developed to help security managers gauge the effectiveness of these products. Our program offers the end user community a selection of products that provide security and quality.