I'm just curious how many installations manage their own WAFs, which each is using, and in particular I'm asking whether anyone is using CloudFlare (which interests me for their claimed superior bot detection). Is anyone using managed rulesets, or writing their own?
I believe Harvard Dataverse is using a WAF from AWS.
Last updated: Jan 09 2026 at 14:18 UTC