A web application firewall (WAF) is a type of application firewall that lets you see and analyze HTTP traffic to and from a web application. Let's explore our recommended WAFs. They all run on regular PCs ??? no proprietary hardware is needed. They are free software ??? all are published under an open source license. By having full access to the source code, users have the freedom to customize and extend the software.