ShieldGate Docs

WAF policies

Testing policies

Safe rollout workflow from Test/Detect to Enforce.

Goal

Ship WAF coverage without surprising production users.

  1. Author the rule with a tight path/method scope.
  2. Set mode to Detect or Simulate.
  3. Publish and generate realistic traffic (or staging replay).
  4. Review Analytics → Security events.
  5. Adjust expression to cut false positives.
  6. Switch to Enforce and monitor again.
  7. Keep a rollback version handy (Config → Rollback).

Using Test mode

Test rules are skipped on the live path—use them for offline/lab validation in the control plane tooling when available, not as a shadow mode for production traffic.

Verify

  • Detect: events without elevated 4xx/5xx from WAF blocks.
  • Enforce: only intended abuse is denied; error budgets stay healthy.