Claim Listing
Claim your listing

Find a provider

Domains

Free tools

Rankings & research

Learn

For providers

AboutContact
ENESJADEFRZH-HANT
Appearance set to Dark
Azure WAF logo

Azure WAF

Enterprise WAFUnverified

Azure WAF is Microsoft's web application firewall, deployed either on Azure Front Door for global edge protection or on Application Gateway for regional, in-VNet protection. It ships managed rule sets based on the OWASP Core Rule Set plus Microsoft-authored rules, with custom rules, rate limiting, and geo-filtering on top.

azure.microsoft.com ↗2019 (Microsoft)
Visit Azure WAF ↗← All security solutionsClaim this listing →
Profile unclaimed

If you represent Azure WAF, claiming is free and adds a Verified badge to this security profile. Start verification →

Category
Enterprise WAF
Best for
Azure-hosted apps and APIs
Pricing
Pay as you go (per policy + per request)
Founded
2019 (Microsoft)

HOW IT WORKS

Its natural home is applications already running in Azure, where it integrates with the rest of the platform and is enabled as configuration rather than a separate vendor. A managed bot-protection rule set extends it beyond basic filtering.

Pricing is pay-as-you-go by policy and request volume. Like AWS WAF, it is the obvious choice when your app already lives on the matching cloud; for sites hosted elsewhere, an origin-agnostic edge WAF is more suitable.

Category context: Edge and cloud WAF platforms for larger sites and APIs, with managed rules, bot defence, and DDoS at global scale. Usually custom-priced.

WHAT IT DOES

  • WAF on Azure Front Door (global edge) or Application Gateway (regional)
  • Managed OWASP Core Rule Set plus Microsoft rules
  • Custom rules, rate limiting, geo-filtering
  • Bot protection rule set

BEST FOR

  • Applications hosted on Microsoft Azure
  • Teams standardising on Azure Front Door / Application Gateway
  • Workloads needing regional in-VNet WAF (Application Gateway)

ALTERNATIVES TO AZURE WAF

Enterprise WAF
AWS WAF

Amazon's pay-as-you-go WAF that plugs into CloudFront, ALB, API Gateway, and AppSync.

Compare →
Cloud WAF
Cloudflare

The most widely used cloud WAF and CDN, filtering attacks at the DNS edge before they reach your origin.

Compare →
Enterprise WAF
Fastly Next-Gen WAF

The Signal Sciences engine on Fastly's edge, protecting web apps and APIs with low-friction, threshold-based blocking.

Compare →

AZURE WAF FAQ

What is Azure WAF?

Azure WAF is Microsoft's web application firewall, available on Azure Front Door for global edge protection or on Application Gateway for regional, in-VNet protection. It uses managed OWASP-based and Microsoft rule sets plus custom rules, rate limiting, and geo-filtering, and integrates natively with Azure-hosted applications.

How much does Azure WAF cost?

Azure WAF is billed pay-as-you-go based on the WAF policy and the volume of requests inspected, with the exact model depending on whether it runs on Front Door or Application Gateway. It is cost-effective for Azure-hosted apps and priced as part of the Azure platform.

Front Door WAF vs Application Gateway WAF?

Azure Front Door WAF protects at Microsoft's global edge, ideal for public, internet-facing sites needing CDN and global reach. Application Gateway WAF is regional and runs inside your virtual network, suited to internal or region-specific apps. Many architectures use Front Door for public traffic and Application Gateway for internal layers.

Editorial independence

HostList is independent. This profile is editorial; HostList accepts no sponsorship, affiliate commission, or paid placement from Azure WAF or any security vendor.