WAF Overview
Elchi's standalone WAF — Coraza with the OWASP Core Rule Set, authored in the UI and delivered to Envoy as a WASM filter through the xDS snapshot.
CRS Rule Library
Browse the bundled OWASP Core Rule Set — filter by version, severity, phase, paranoia level, and tags; inspect rule detail; add rules or whole files in bulk.
Building a Configuration
Author a WAF config in the two-pane editor — directive sets, the lint badge, CRS setup and demo includes, starter presets, the template builder, per-authority routing, metric labels, and the live .conf preview.
Versioning & Restore
Every WAF save is snapshotted — browse the History tab, diff any version against the current state, and restore a prior version in one click.
WAF Studio — Custom Rules & Tuning
The guided rule-building experience — write custom SecLang, exclude and tune CRS rules, set paranoia and anomaly thresholds, and stay within the WASM runtime's limits.