A WAF is a cloud-based firewall service that screens and protects your real-time website traffic from threats like SQL injection attacks (malicious data that essentially tricks your site into doing something it shouldn’t) and DDoS attacks (crashes your site by overwhelming it with a flood of automated traffic). WAF only takes a few minutes to set up and is the front-line defense for your site in between Website Security scans.