WAF Detection

What It Does

Makes an HTTP request to the domain and analyzes multiple detection signals: WAF-specific response headers (cf-ray, x-sucuri-id, x-akamai-transformed), server header patterns, Set-Cookie signatures (e.g., __cf_bm, incap_ses_), response body patterns (block pages, challenge pages), and HTTP status code behaviors. Each detected provider includes vendor name, WAF type, confidence level (high/medium/low), and the specific evidence that triggered detection.

Why It's Useful

WAF detection is essential for security assessments (knowing what defenses are in place), troubleshooting (identifying if a WAF is blocking legitimate traffic), and competitive intelligence (understanding infrastructure choices). For penetration testers, WAF awareness is critical for adjusting testing methodology. For operations teams, knowing the WAF provider helps diagnose false positive blocks on API traffic.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/waf" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/waf?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/waf',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.