A web application firewall (WAF) is a firewall software placed between client traffic and the web server.