Best WordPress Hosting
 

Automattic’s Web Application Firewall (WAF) Failed to Provide Protection Against Zero-Day That WordPress Firewall Plugins Did

via pluginvulnerabilities.com => original post link

When it comes to securing WordPress websites, it is very common to find people assuredly claiming that WordPress firewall plugins provide less protection than web application firewalls (WAFs) from web hosts or cloud security providers, without any evidence to back that up. Take one new WordPress security provider, Snicco, that claims they offer the “only WordPress plugin smashing real security threats overlooked by the WordPress ecosystem”, who made a claim along those lines:

A general-purpose WAF that checks for bad request parameters, SQL injection, or similar offenses is orders of magnitude faster and more effective at the web server level or CDN level. [Read more]