The WAF that tells you what's safe to block.
Rules start in count. After 24 hours, your dashboard shows what's safe to block — one click.
One DNS change — or we do DNS. Promote Copilot reads your count window and explains what's safe to promote — you still click once.
Start a 14-day trial · $150/site/mo
Card at Stripe checkout. Cancel before the 14-day trial ends and you won't be charged.
Walk through the example or see an example Tuning panel. You still click once.
Promote Copilot
Promote Copilot reads your count window and explains what's safe to promote — you still click once.
Set up & tuned for you
We provision the shield and issue SSL. You point DNS, or request concierge and we coordinate the zone.
Full managed WAF
SQL injection, XSS, exploits, bots, IP reputation, account-fraud protection — turned on in count. You promote later.
Free auto SSL
A free TLS certificate is issued and renewed for you. Visitors get HTTPS automatically.
Human support
Email support@wafcybersecurity.com — rule tuning, spike reviews, shield health.
Custom rules
Block by country or IP, allow-list trusted clients, rate-limit abuse — next to managed rules.
Protected in three steps
We stand up the shield. You point DNS — or we do. Nothing blocks until you click.
- 01
Add your site
Domain and where it is hosted. We stand up the edge and issue SSL. Your server and code stay put.
- 02
Point DNS — or we do
One record if you control the zone. Concierge if the registrar is someone else's ticket.
- 03
Count, then promote
Rules watch for about a day and block nothing. Then the dashboard names what's safe to block. You click once.
Scan your site — free first if you want the grade before an account. The trial on the report prefills that domain.
Before you buy
No customer logos and no compliance badge. These are the pages you can check.
Who runs it
A sole proprietorship. Email support@wafcybersecurity.com — the contact on the terms, privacy policy, and SLA.
What we log
Authorization and cookie values are redacted before a request is logged.
How to reach a human
Email. Concierge DNS is typically about one business day once access is clear — not a clock-hour promise.
Uptime
99.9% monthly edge availability for Live sites, with a service credit if we miss it.
Compared with doing it yourself
Managed rules in a console still leave you reading every hit. A platform you configure is a suite of products. This one names what is safe to block, and you still click once.
A console you run
You build the distribution, certificate, and rule list, then decide what to flip.
A platform you configure
Many products. You choose what to log, what to block, and when to tune. Prices are on the comparison.
This product
We provision and start in count. After about a day the dashboard names Promote, Hold, or Needs allowlist.
Managed rules, custom IP/geo/rate rules, account-fraud protection, Promote Copilot, free SSL, Slack/email spike alerts, live dashboard. 14-day trial.
Start a 14-day trialCard at Stripe checkout. Cancel before the trial ends and you won't be charged.
Who this is for
Campus, public-sector, and web teams with too many sites.
Campuses
Enrollment, athletics, news, and departmental sites that need a shield without another console for IT to run.
Public agencies
Public-facing sites where downtime and defacement are not an option. We run the shield; your team keeps the site.
Web teams with too many sites
Too many domains, not enough people to babysit a firewall. Add a site, point DNS, see what's blocked.
Guides
Short operator explainers — start in count, then promote what's safe.
All guides
Count mode, false positives, virtual patching, and platform explainers.
Product docs
How onboarding, Promote Copilot, alerts, and billing work today.
How count mode works
Rules watch for about 24 hours. You still click once to promote.
What's safe to block
How to read a count window without breaking forms.
What is Promote Copilot?
Promote, Hold, or Needs allowlist in plain English — you still click once.
Questions, answered
Do I have to move my website?
No. We sit in front of your existing site via DNS — your server, hosting, and code stay exactly where they are.
Will it slow my site down?
No noticeable impact. Traffic runs through a global edge, milliseconds from visitors. Clean requests pass straight through to your origin.
What if a rule blocks a real customer?
New protections start in count for 24 hours — they watch without blocking — then you promote to block. Promote Copilot explains the count window; you still click once. It never auto-blocks. You're always in control per rule. See how count mode works and what a branded 403 looks like.
Can I keep my own DNS provider?
Yes. CNAME mode keeps your provider. Or pick managed DNS, delegate nameservers once, and we handle SSL and routing.
Is my traffic data private?
Authorization and cookie headers are redacted before anything is logged. We keep what's needed for blocked attacks and traffic stats.
What if my site gets a lot of traffic?
300 GB and 5 million requests a month included. Extra traffic is $0.15/GB and $3 per million requests. You see live usage; we email before overage adds up.
Can I cancel anytime?
Yes — month to month, $150 per protected site. Remove a site and billing follows.
Can I get Slack or webhook alerts?
Yes. Email is on by default. Add a Slack incoming webhook or any HTTPS webhook on the Alerts page.
Do you have an uptime SLA?
Yes — 99.9% monthly edge availability for Live sites, with service credits if we miss it. Origin downtime, DNS/registrar mistakes, and regional edge outages are excluded. Details on the SLA.
What engine sits in front of the site?
AWS WAF on CloudFront. We provision and tune it; you change DNS — or we do.
Who runs ProtectMyWebsite?
ProtectMyWebsite is a sole proprietorship. Email support@wafcybersecurity.com — that is the contact on the terms, privacy policy, and SLA. See security and support.
How is this different from AWS managed rules alone?
Same engine — AWS WAF on CloudFront — without you building the distribution, certificate, and Web ACL. Rules start in count. After 24 hours the dashboard names what's safe to block. You still click once. It never auto-blocks. See the console comparison.
How is this different from Cloudflare?
Cloudflare Business is a platform you configure, listed at $250 / month per zone, or $200/mo equivalent on annual prepay ($2,400/year). This is a managed WAF at $150/site/month. You do not get their full product suite. You get the shield, count-then-click, and email support. See the Cloudflare comparison.
Do you have SOC 2 or another certification?
No. We do not claim SOC 2, ISO 27001, FedRAMP, PCI DSS, or any other compliance certification. Read the security page, the privacy policy, and the SLA before a procurement review.
How do I reach a person?
Email support@wafcybersecurity.com. Concierge DNS, when you ask us to change DNS, is typically about one business day once access is clear — not a clock-hour promise. Campus teams who need an invoice use Campus Estate, which Mac invoices. Self-serve stays a card at Stripe.
$150/site/mo · 14-day trial