# WAF Protection

## Protection

* Brute Force Protection
* DDOS
* Malware & Hack Prevention

## How SUCURI protect

* **Virtual Patching & Hardening:** If a security patch is released but you’re unable to update, your website becomes an easy target for hackers. With the firewall surrounding your website, patches and server rules are constantly updated by our researchers.
* **Application Profiling:** Every website has its own set of challenges depending on the CMS, server software, and other technology used in the stack. We analyze all types of traffic to explicitly block requests that don’t fit your web application’s profile.
* **Machine Learning:** We correlate attack data across our network to better understand malicious behavior. This sophisticated approach allows us to protect your site from emerging security threats before they compromise your website.
* **Signature Detection:** Our solution uses heuristic and signature-based techniques. Incoming traffic is sanitized before reaching your website. If we detect malicious patterns matching an attack, we block it before it ever reaches your website.
* **Protected Pages:** Add another layer of protection by enabling the Protected Page feature. You can use this option to add passwords, CAPTCHA, 2FA (via Google Authenticator), or IP whitelisting and protect your most sensitive web pages.
* **Bot Blocking:** When our system detects a malicious bot or hacker tool trying to attack your site, it is blocked automatically. This helps to protect your website from being found by automated tools and used in massive malware campaigns.
* **Whitelisting:**&#x4F;nly allowed IP addresses ensure that only your team can access website admin panels. When you add your site, simply check a box to block access to your admin pages so only people with whitelisted IPs will be able to login.
* **Geo Blocking:**&#x4D;ost attacks come from a handful of countries. If you aren't doing business there, you can block all visitors from those IP ranges. We even have a button allowing you to block the top three attack countries by default.

## Homepage

* Allow search and add favorite
* Show Quick action for each site:
  * Goto report
  * Go to Audit Trails
  * Quickly add Whitelist, blacklist
* Show statistics of blocked and allowed requests
* Have quick performance compare

![](https://3246157494-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LaUmFQfTdZOdMspmUQ3%2F-LaW3ISC6yX_0LZFYTpy%2F-LaW91yTMurDUdVOOyGO%2FScreen%20Shot%202019-03-21%20at%2011.49.06%20PM.png?alt=media\&token=ea6a8e17-2a5f-4d00-a568-a1b87a811aac)

## Detail Page

### Reports

### Audit Traits

### Realtime

### Email Reports

### Setting
