Workspace Events Single-node WAF demo · No CDN cache

TENANT OVERVIEW

— CONNECTING

— → —

Lab policy preview

LIVE REQUESTS / 24H↗

0 excludes laboratory simulations

THREATS STOPPED◆

0 0% of total traffic

AVERAGE RISK◒

0/100 explainable risk score

EDGE RESPONSE TIME●

0ms including origin response

REQUEST VOLUME

Traffic and decisions

RequestsBlocked

SECURITY POSTURE

Protection status

—

Configured policy

Application-layer WAF
Single-node demonstration

Live protection mode—

Signature rules5 + scanner signals

CDN cache / global edgesNOT IMPLEMENTED

LIVE EVENT STREAM

Latest decisions

Connecting…

TIME	DECISION	RISK	REQUEST	SOURCE	SIGNAL	LATENCY

No live requests yet. Visit the protected demo domain.

TRAFFIC EXPLORER

Request analysis

Sanitized metadata with no passwords, tokens, or request bodies.

TOP PATHS

Most active paths

TOP SOURCES

Most active sources

REQUEST LOG

Detailed events

SAFE SIMULATION ENVIRONMENT

Attack Lab

Simulations are stored separately from live traffic. Origin is not contacted.

ISOLATED / SAFE

Simulation policy

csa-lab / decision trace

Select a scenario to inspect the decision trace.

POLICY ENGINE

Active rules

Every decision is explainable and tied to a concrete signal.

CSA-1001SQL injectionQuery and request body analysisBLOCK · 85

CSA-1002Cross-site scriptingScript and event-handler patternsBLOCK · 80

CSA-1003Path traversalDouble URL decodingBLOCK · 90

CSA-1004Command injectionShell operators and commandsBLOCK · 90

CSA-1005Sensitive file probe.env, .git and system pathsBLOCK · 75

CSA-1201Rate limitTenant and source request windowLIMIT · 70

CONTROL PLANE

Audit log

Protection-mode changes and every executed simulation.

EMAIL SECURITY · MVP

Check before opening.

Sender, link and payment-change indicators. No antivirus or reputation lookup.

Sign in as an administrator to inspect private email assessments.

This view covers email connectors independently of the WAF workspace selector. Only assessment metadata is retained; message bodies, addresses and links are not stored.

“No indicators” does not mean safe. Attachments are not scanned. This service does not read Gmail, move messages or quarantine them; a connected application must enforce the result.