SOC Threat Library

A demo app sitting behind the WAF Management Platform

🔒 Served through the WAF

Internal knowledge base

Analysts search this library for attack signatures and payloads. Every request first passes through the WAF — including the search below.

Search the library

Try a normal query, then try pasting a payload an analyst might look up.

This form sends GET /library?term=… through the WAF. A legitimate analyst query that looks like an attack — e.g. searching for a powershell -enc indicator — trips a CRS rule. That's the false positive we fix live with a scoped exclusion, without weakening protection elsewhere.

Want to see it block real attacks?

Open the attack console and fire common web attacks at this app.

Open Attack Console →