Nexcore//Alliance
Blue Team

WAF DETECTION DASHBOARD

Analyze remote host web traffic headers to verify WAF firewall protection status, calculate intensity ratings, and check active shield details.

Target Website Details

Ownership Verification

Verify asset ownership before scanning

We require a same-organization work email plus a DNS TXT or HTTP file proof on your target domain.

1. Start2. Email3. Proof4. Scan

Use a company-managed email that matches the target domain or one of its approved subdomains.

What this checks

  • Email-domain match
  • Domain control proof
  • WHOIS / RDAP / DNS context

DNS and CDN changes can take time to propagate. If your proof is newly published, wait a few minutes and run the proof check again instead of starting a brand-new scan.

No active telemetry data to display. Execute WAF detection check above.

Dashboard Scope

  • Detects active Web Application Firewall (WAF) products (e.g. Cloudflare, AWS WAF).
  • Audits custom server-side signature cookies and matched response headers.
  • Validates presence of security headers (CSP, HSTS) to compute protection levels.