I'm just curious how many installations manage their own WAFs, which each is using, and in particular I'm asking whether anyone is using CloudFlare (which interests me for their claimed superior bot detection). Is anyone using managed rulesets, or writing their own?
I believe Harvard Dataverse is using a WAF from AWS.
Last updated: Nov 01 2025 at 14:11 UTC