Welcome to CoreWAF

CoreWAF keeps the traffic you do not want away from your site. You decide what gets in and what stays out — IPs, bots, countries, specific paths — and the panel applies it in seconds.

It runs inside your own server, next to your app. No DNS change, no provider swap, no third party sitting in the middle of your traffic.

Documentation

• Installation — how to get it running on your site.
• Rules — how to choose what to block and what to let through.
• Under Attack — automatic captcha against bots and attacks.
• Status — check and apply what you changed in the panel.
• Share an account — give someone read access to a domain.
• Transfer an account — hand ownership of a domain to another account.