Web Application Firewall for ColdFusion

The Foundeo Web Application Firewall for ColdFusion is a high performance, customizable engine that blocks many types of attacks to your ColdFusion applications.

Application License $499 per ColdFusion application	Server License $1,299 per server	Enterprise License $8,999 per company wide use multiple servers and apps

Blocks Many Types of Attacks

The firewall comes with over 15 filters to help protect against things like:

Cross Site Scripting / XSS
SQL Injection
Session Hijacking
Cross Site Request Forgery
CRLF Injection
Path Traversal Attacks
Password Dictionary Attacks

Important Note

Just as there is no lock that can't be picked, No web application firewall can block all of the possible attack variations out of the box - security is not absolute. As such we don't claim that the Foundeo Web Application Firewall for ColdFusion will prevent all variations of the above list of attacks. It can however block, filter, and log a large number of malicious requests detected by our filters.

We highly recommend that you perform security audit frequently to identify security vulnerabilities within your code, and server configuration. This product should not be used as a one stop solution to your security issues, but rather as another tool to deflect attacks against your website.

We include a FREE copy of our CFML Security Checklist with every purchase of our firewall.

Easy to Add to Existing Applications

Adding protection to your existing web applications is extremely easy to do, even for entry level programmers. Additionally we can help you install it.

Copy the Firewall Files on to your server
Edit the configuration file to determine which types of attacks you want to block or log.
Add a few lines of code we supply to your Application.cfm or Application.cfc file

Customizable & Configurable

Because the firewall is written in ColdFusion, you will find it very easy to extend, and configure. Other firewalls have domain specific languages you need to learn in order to configure them properly. You already use CFML why not use that to configure your WAF.

You can also write your own custom filter in CFML that runs inside the firewall.

Thoroughly Tested

We've worked hard to create a high quality product. We've written hundreds of unit tests, and have researched web application security extensively to create a first of its kind security product for ColdFusion.

Run's Where You Need It

We support the ColdFusion Web Application Firewall on:

Adobe ColdFusion 6.1, 7, and 8
Open Bluedragon 1.0
Railo 3

Works on most shared hosting environments.

Licensing

There are three standard licensing options, however if you have a licensing need that doesn't fit within our model we would be happy to work out a custom quote.

Application License - This license allows you to use the firewall on one web application on one server. An Application is defined as a collection of CFML code which runs off of a single Application.cfc or Application.cfm file.
Server License - Allows you to use the firewall on an unlimited number of Applications residing on ONE physical server. The physical server may contain multiple J2EE server instances, and multiple virtualized operating systems.
Enterprise License - Software may be used on multiple physical servers, and applications within the same organization located in the same country.
Clustered License - For Applications that are clustered or behind a load balancer. Contact Us for details and pricing.
Cloud License - For Applications that run on a number of servers that changes dynamically. Contact Us for details and pricing.

Other Security Products & Services

CFML Security Checklist Included Free with Firewall Purchase
ColdFusion Security Consulting

ColdFusion is a trademark of Adobe Systems Incorporated.