Web-Application-Firewall (WAF)

Data theft, credit card fraud, extortion—cybercrime is a reality. Our web application firewall operates on two levels: External Shielding blocks attacks before they even reach your infrastructure, and Internal Leak Prevention stops unauthorized data leaks. SQL injections, XSS attempts, and unauthorized API calls to sensitive customer data don't even get through.

We rely on Bunny as global edge protection for DDoS defense and automatic bot blocking.

Requests first pass through the Bunny network, where they are checked for known attack patterns and cached before undergoing a more in-depth analysis for SQL or XSS signatures in the NGINX stack. This allows you to achieve maximum performance with minimal latency, while security by default remains active.

The result:

• No damage to your image due to data leaks.
• No crisis PR thanks to proactive defense.
• Less forensic effort – because attacks are blocked in the log database.

WAF is seamlessly integrated into the ScaleCommerce platform. Our second-level support team immediately takes all necessary steps in the event of complex attack patterns—from analysis to fine-tuning the filter rules. This keeps your shop ecosystem secure, your customers protected, and your business available without interruption.

‍