WafSight 2026.7.17.1

WafSight

Detect WAFs & CDNs with confidence — built for speed, designed for .NET

WafSight is a high-performance WAF/CDN detection engine for .NET. Analyze HTTP responses, DNS records, TLS certificates, and payload probes — then get a scored, ranked verdict with confidence levels.

Available as a library (NuGet), a cross-platform CLI (native AOT), and a DI-ready service for ASP.NET Core.

Full documentation at rodrigoramosrs.github.io/WafSight

Features

Quick Start

NuGet

dotnet add package WafSight

Library

using WafSight;

var client = new WafDetectorClient();
var result = await client.DetectAsync("https://example.com");

if (result.HasWaf)
{
    Console.WriteLine($"WAF: {result.Waf.Name} (confidence: {result.Waf.Confidence:P0})");
}

if (result.HasCdn)
{
    Console.WriteLine($"CDN: {result.Cdn.Name} (confidence: {result.Cdn.Confidence:P0})");
}

CLI

# Quick detection
wafsight detect https://example.com

# Verbose output
wafsight -V 3 detect https://example.com

# Batch from file
wafsight batch urls.txt

# List providers
wafsight providers

Dependency Injection

services.AddWafDetector(options =>
{
    options.Timeout = TimeSpan.FromSeconds(15);
    options.EnableGenericDetection = true;
    options.EnableDnsAnalysis = true;
});

Detection Architecture

+-------------------------------------------------+
|              WafDetectorClient                   |
|                                                  |
|  +--------------+    +-----------------------+   |
|  |  HTTP Client |----+  Response Collector   |   |
|  |  (resilient) |    +-----------+-----------+   |
|  +--------------+                |               |
|                                  | Headers /     |
|                    +-------------v-------------+  |
|                    |   Provider Registry        |  |
|                    |                            |  |
|  +-----------------+---------------------------+  |
|  |  CloudFlare ----|                            |  |
|  |  AWS ----------|    IDetectionProvider      |  |
|  |  Akamai -------|    (8 providers)           |  |
|  |  Fastly -------|                           |  |
|  |  Azure --------|                            |  |
|  |  Imperva ------|  Evidence Collector        |  |
|  |  Sucuri -------|  -> Evidence Scorer       |  |
|  |  F5 ----------|   -> Confidence Ranking    |  |
|  |  Generic ------|  -> Detection Result      |  |
|  +-----------------+---------------------------+  |
|                                                  |
|  +-------------------------------------------+   |
|  |  Evidence Scorer  |  DNS Analyzer         |   |
|  |  (weights + tiers) |  (CNAME, A, NS, TXT) |   |
|  +-------------------------------------------+   |
|                                                  |
|                    +------------------+          |
|                    | DetectionResult  |          |
|                    |  WAF + CDN       |          |
|                    |  Confidence      |          |
|                    |  Caveats         |          |
|                    +------------------+          |
+-------------------------------------------------+

Supported Providers

Evidence Scoring

WafSight doesn't just detect — it scores confidence:

Results include caveats when evidence is weak (e.g., body-only detection without header confirmation).

CLI

Usage: wafsight [options] <command> [arguments]

Options:
  --verbose, -v, -V [0-3]  Verbosity level (0=None, 1=Low, 2=Medium, 3=High)

Commands:
  detect, -d <url>          Detect WAF/CDN for a single URL
  batch,   -b <file>        Detect WAF/CDN for URLs in a file (one per line)
  providers, -p             List all registered providers
  version                   Show version
  help,     -h              Show this help

Verbosity Levels:
  0 (None)   - Only errors and critical information
  1 (Low)    - Errors + basic status
  2 (Medium) - Low + headers, DNS records, provider scores
  3 (High)   - Medium + payload probing, evidence details, timing

Binary Downloads

AOT binaries are native, self-contained executables (~9 MB). Framework Dependent requires .NET 10 Runtime.

Download from GitHub Releases.

Requirements

Special Thanks

This project was inspired by outstanding open-source work:

Open source thrives on community. If WafSight is useful to you, consider supporting these projects too.

MIT License · Built for .NET