If there are vulnerabilities in your website that you cannot fix yourself, Protecting can block attacks on your website (such as XSS, SQL Injection, Cross-site forgery,...). The WAF provided by Protecting follows the reverse-proxy model - the WAF acts as a proxy in the middle that receives requests and forwards them to the web application (user's website), and receives the response from the web application and forwards it back to the client. In that process, the WAF will analyze and block any malicious requests before they reach the user's website.

Did this answer your question?