OpenWAF

OpenWAF puts the OpenWAF edge, your servers and your agents' work in your pocket. Sign in with an API token of your organisation and see what is happening right now. ZONES AND LIVE EVENTS • Every zone with its DNS and proxy status. • The last 24 hours per site: requests blocked, challenged, logged and allowed, with a timeline chart. • A live tail of edge events. Open any event to see the rule, attack type, client, country and request. APPROVALS • OpenWAF Tasks run scheduled browser jobs, and every write waits for a person. • See the exact steps the browser will run, the target and the screenshot taken when the action was proposed. • Approve with Face ID, Touch ID or your passcode. The app checks that the steps match the approval's hash before it sends anything. Or reject with a reason. SERVERS • Hosts running openwaf-sensor report signed telemetry: status, kernel, listening ports (MPTCP included), firewall, containers, packages and file changes. • A timeline of events per server with filters and a live tail, and a warning when a reboot is pending. • Add a server with a one-time enrolment token, or revoke one. VULNERABILITY BRIEFINGS • Short, sourced notes on critical vulnerabilities: what happened, what to do now and what the edge covers. • Check which of your sites may be affected, with the evidence and the confidence of each match. ALSO • Browser sessions of OpenWAF Browsers: take control of a session for a login or a 2FA step, or stop it. • Blocks of the AI egress gateway, live. • Your organisation's audit log (admins). PRIVACY Your token stays in this device's Keychain. The app talks only to dash.openwaf.dev and openwaf.dev, and has no analytics, ads or tracking. You need an OpenWAF account. Create one for free at openwaf.dev, then create an API token in the dashboard.