Check WAF protection on a website

Use the cPFence WAF Protection Checker for a website you administer.

1. Enter the website address in Website URL.
2. Choose Generate Test Link(s).
3. Open the generated link for your website and review the response.
4. Compare that request’s URL and time with WAF Management → WAF Summary or WAF tracking.

Use the request history to match the tested URL and time; this picture shows retained events, not a new test result. Identifying values are hidden. Select the image for full size; use browser Back to return.

Bulk mode accepts one URL per line, up to 20; review the targets before opening links. Test requests can appear in site/WAF logs.

A test proves only its request

A blocked test does not prove every URL, body type, protocol or proxy path is inspected. An allowed response can involve an exemption or engine limitation. Check the exact WAF event and recorded engine limits.

If no corresponding event appears or the result is unexpected, follow WAF troubleshooting. Keep the affected URL, time and engine version for support.