{"uid":"cap_vmmETl2m0wKFI5JPprOcU","slug":"waf-detection-e266f188","name":"WAF Detection","description":"Web application firewall detection: signs of Cloudflare WAF, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, ModSecurity and others from response headers, cookies and block-page behaviour on a probe request. Know what stands in front of an app. $0.01 per site.","url":"https://intel.rallylive.ca/site/waf","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_kogA-JFruVgDTSyUPsnye","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Detects which Web Application Firewall (WAF) is protecting a target site by analyzing response headers, cookies, and block-page behavior via a probe HTTP GET request.","exampleAgentPrompt":"Can you detect which WAF is protecting https://example.com — I want to know if it's Cloudflare, AWS WAF, Akamai, or something else?","exampleUseCases":[{"title":"Pen test pre-engagement recon","prompt":"Before I start my penetration test on https://targetcorp.com, can you detect what WAF is in front of it so I know what evasion techniques to plan for?"},{"title":"Competitor infrastructure analysis","prompt":"I'm researching competitors — can you check what Web Application Firewall https://rival-saas.io is using? I want to know if it's Cloudflare, Imperva, or something else."},{"title":"Security audit WAF verification","prompt":"We're auditing our own site at https://mycompany.com — can you confirm which WAF vendor is actually protecting it and what signals gave it away?"}],"resultDescription":"Returns the detected WAF vendor (e.g. Cloudflare, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, ModSecurity) along with the detection evidence such as specific response headers, cookie names, and block-page patterns that triggered the identification. Returns no-WAF-detected if none is found.","failureModes":["Target site is unreachable or times out — no detection result returned","WAF uses advanced cloaking or zero-footprint configuration — may return false negative","CDN without WAF properties returns ambiguous signals","Rate-limiting by target site blocks probe request","Unknown or obscure WAF vendor not in detection signatures — returned as unrecognized"],"whenToPreferThis":"Use this endpoint when you need lightweight, low-cost ($0.01) WAF fingerprinting without maintaining your own WAF signature database or running probe infrastructure. Prefer it for single-site reconnaissance, security audits, or enriching threat intelligence pipelines. It covers all major commercial and open-source WAFs including Cloudflare, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, and ModSecurity.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:13:37.837Z","isFirstParty":false}