Comment by lta

I'm still strongly suspecting this whole WAF thing is mostly complete bullshit intended for projects doing security works mostly from spreadsheets.

Could someone with a proper background in security confirm or invalidate my suspicion ?