Home › About Us › References

Experience protecting critical applications.

Much of WAFY's F5 ASM work has been delivered under confidentiality and NDA, so organisations are described by sector rather than by name.

Sector experience

The experience behind WAFY, by sector.

The experience behind WAFY includes F5 Advanced WAF (ASM) policies protecting organisations across banking, payments, aviation, insurance, energy and government.

A Global Interbank Network

F5 ASM experience taking 79 per-application policies to blocking on a global interbank network, one application at a time, without incident.

A Global Payments Gateway

F5 ASM experience securing a global payments gateway across worldwide sites: full OWASP web and API coverage, DDoS, brute-force and session-theft protection, kept in sync via F5 GTM.

A UK General Insurer

F5 ASM experience building Advanced WAF policies for a SaaS-heavy insurance estate with no application-team input, and getting them accepted and enforcing.

Major Airlines

F5 ASM experience managing Advanced WAF policies for two major airlines' booking and operational systems, safely, inside very strict airline change control.

An Energy and Utilities Major

F5 ASM experience delivering OWASP Top 10 coverage for a large energy provider, deliberately balanced for availability so it kept working as teams continued to ship.

A Government and Public-Sector Body

F5 ASM experience delivering fully OWASP-compliant Advanced WAF policies for a government body's internal systems, handled with discretion and to strict public-sector governance.