A web application firewall (WAF) is a type of application firewall that lets you see and analyze HTTP traffic to and from a web application. Let’s explore our recommended WAFs. They all run on regular PCs – no proprietary hardware is needed. They are free software – all are published under an open source license. By having full access to the source code, users have the freedom to customize and extend the software.