API and Modern Application Protection

REST, OpenAPI, JSON/XML, GraphQL, SSRF and prompt injection.

• Can I protect my REST APIs with TR7 WAF?WAF-15-001
• How do I set up a positive security model for an API (allowed endpoints, methods, parameters)?WAF-15-002
• Can I generate API protection rules automatically from my OpenAPI definition?WAF-15-003
• Can I apply schema-like checks (key list, depth, length) to JSON-bodied API requests?WAF-15-004
• Can I protect my SOAP / XML services; is there protection against XXE attacks?WAF-15-005
• Can I protect my mobile application's backend API?WAF-15-006
• Is there protection against SSRF and cloud metadata (169.254.169.254) access attempts?WAF-15-007
• Can it catch prompt injection attacks against my LLM / AI services?WAF-15-008
• Can I protect GraphQL requests?WAF-15-009
• Is there protection against HTTP request smuggling and parameter pollution attacks?WAF-15-010