Question 1

What is the cost of a WAF service?

Accepted Answer

The cost of WAF Security varies depending on the deployment model, WAF provider, and the number of domains that need to be protected. You can use our price calculator to get an indication of the price for your specific requirements.

Question 2

What attacks does a WAF protect against?

Accepted Answer

A web application firewall protects web servers from attacks that occur via the Hypertext Transfer Protocol (HTTP/S). By monitoring the traffic and applying customized rules, a web application firewall closes various general and customer- or application-specific security gaps, including addressable risks from the OWASP Top 10 such as SQL injection, cross-site scripting (XSS), or directory traversal, as well as known zero-day exploits.

Question 3

Do I need to install any hardware or software to use Myra WAF?

Accepted Answer

No. Myra WAF is a Cloud WAF Service that requires no additional hardware or software.

Question 4

What does the onboarding process look like?

Accepted Answer

The onboarding process for the Cloud WAF is designed to ensure a smooth and risk-free deployment without interrupting live traffic:

Step 1: Initial Assessment
Assessment of your current infrastructure, existing threat landscape, and security requirements to establish core protection priorities.

Step 2: Deployment of Standard Rules
OWASP-based rule sets curated by Myra experts are added to your organization. Your Customer Success Manager will guide you through all WAF features and configuration options.

Step 3: Activation in Log Mode
All WAF rules are initially set to log mode for two weeks, giving you full visibility into traffic patterns and allowing you to check for false positives before traffic is blocked.

Step 4: Functional Testing
Thorough functional testing validates correct operation prior to deployment. All configurations are verified against your specific application requirements.

Step 5: Deployment and Ongoing Optimization
Final setup meetings; rules are set to “Block” (or your chosen action) and deployed.

Step 6 (optional): Managed WAF
Optionally, you can add the Managed WAF Service to receive continuous rule creation by experts, fine-tuning, and security optimization.

Question 5

Can Myra WAF protect applications running in multiple environments simultaneously?

Accepted Answer

Yes – this is a core strength of the Myra Cloud WAF Service. The Myra WAF can be used to protect seamlessly across on-premises data centers, hosting provider infrastructure, public cloud (AWS, Azure, Google Cloud), and private cloud. This eliminates the cost and management overhead of maintaining separate WAF services per environment.

Question 6

What is the difference between Myra WAF and the Managed WAF?

Accepted Answer

The self-service WAF gives you full access to the Myra dashboard and API to configure and manage rules yourself. The Managed WAF Service (available as an add-on) means Myra's security experts analyze your web resources, create custom rule sets tailored to your specific threat profile, and provide ongoing optimization and support.

Question 7

Is the Cloud WAF GDPR-compliant?

Accepted Answer

Yes. Myra Security is a German company, and the entire WAF service is developed within Germany. At Myra, SSL/TLS termination is carried out exclusively in Germany at the customer's request, which ensures compliance with the GDPR. Myra also holds certifications including ISO 27001 (based on BSI IT-Grundschutz), BSI C5 Type 2, PCI DSS, and the Trusted Cloud label.

Scalable HTTP/S traffic filtering Immediate scaling to manage variable web traffic loads.
Handling traffic before and after the customer infrastructure Filtering and rule enforcement both before and after traffic reaches your servers.
Easy rule management Myra provides standard rules (Myra Tags) to protect against common attack patterns such as XSS, SQLi, or directory traversal. In addition, you can define your own WAF rules to defend against other threats according to your requirements.
Flexible action options Choose between various actions for blocking, allowing, challenging (e.g., via CAPTCHA), and logging requests, as well as for modifying header information and rate limiting.
General and path-specific f iltering rules Precise control over the domains and paths that are to be protected by the WAF.
Geo-IP blocking at the application level Use predefined conditions in the WAF rules to select the countries and continents for which traffic is allowed or blocked.
Custom error messages Tailored error messaging to enhance user experience and security transparency.
No impact on midgress traffic regarding costs and performance WAF operation as part of the Myra Security as a Service platform does not affect data traffic between your and Myra’s infrastructure.
API and automation support for integration Programmatic access for integration with CI/CD pipelines and management systems.

Myra WAF

You're in Good Company When You Choose Myra

We Tackle Your Toughest Security Challenges

No Protection Against the OWASP Top 10

Inability to Mitigate API Threats

Complex and Disruptive Implementation

Overwhelming Compliance Challenges

Key Benefits of Myra WAF

Protection for Your Applications

Managed Service with Expert Support

Get up and Running in No Time

Ensure Full Compliance with Key Regulations

Certified Security You Can Rely On

Intuitive WAF Management

See the Myra WAF in Action

WAF Overview

Create Rules

Delete Rules

Myra WAF Features

See Who Relies on Myra WAF

Finoa

Landkreis Regensburg

Deutsche Kreditbank (DKB)

Federal Ministry of Health (BMG)

NFON