What is a web application firewall (WAF)? WAF explained