A Web Application Firewall (WAF) is a security firewall that protects web applications from HTTP and web application-based security flaws.