WAF policy

Protection

When off, the agent still records but does not scan or block.

On Off

Default action

Monitor Log threats, never interrupt the user Block Stop suspicious requests and DOM changes Challenge Ask the user to confirm risky actions

Monitor Block Challenge

Sensitivity

How confident a match must be before it counts as a threat.

Risk threshold

0.35

More alerts Stricter

Block message