What it is
Detects whether a web application firewall sits between the internet and the site, and which one. A WAF filters HTTP traffic to block common attacks such as SQL injection, cross-site scripting and file inclusion.
Why it matters
A WAF changes what every other test means, since the response you get may be coming from the filter rather than the application behind it. Knowing the product also tells you the rule set in play, and WAFs have bypasses and vulnerabilities of their own.
How this assessment works
Skopeon Labs queries public infrastructure signals and authoritative network protocols directly from external sensor nodes. All evaluations are completely non-invasive and agentless, assessing observable configurations without sending malicious payloads or disrupting service.
Operational Scope & Limitations
This check evaluates public perimeter responses observable at the time of inquiry. Endpoints protected behind third-party reverse proxies or CDNs reflect the edge configuration of the proxy layer.