Dear Information Security Hero's, I planned to share some tools which really help you while implementing WAF. Sometime after completing the installation customer will ask "I did not see any attacks, is your WAF working fine ?? " So, to avoid this kind of question, Use the below tool that enables you to evaluate the security efficacy of your web application security solution Unlike other application scanners, which only check for vulnerabilities, it generates both legitimate traffic and attacks traffic to determine if your security solution stops attacks without blocking valid requests. Here only providing top tools only... LightBulb Framework The framework consists of two main algorithms: GOFA: An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query model. Active learning algorithms permit the analysis of filter and sanitizer programs remotely, i.e. given only the ability to query the targeted p Microsoft