Managed WAF for multi-site teams
Campus and agency teams run many sites — departmental CMS installs, shared logins, and not enough people to babysit a firewall. We put a managed WAF in front of each one and run it.
The multi-site problem
Departmental CMS installs lag on patches. Shared login pages take floods. DIY rules throw false positives on real forms. And if origin IPs stay on the public internet, a flood can bypass the edge.
Central IT and agency leads cannot staff another console per property. When the estate is a WordPress Multisite network of blogs — one install, many sites — see Managed WAF for WordPress Multisite campus networks. Drupal Multisite and shared-codebase estates share that story — one edge for many sites. See Managed WAF for Drupal Multisite campus estates.
Longer operator cut — inventory, shared count → promote, and when to Talk to sales: Managed WAF for multi-site campus and agency estates.
How we run it
Onboard is typically about a day. Rules start in count. After 24 hours, your dashboard shows what's safe to block — one click.
$150/site/mo, 14-day trial for a single site or a small shop. Campus teams: Campus Estate — quote on request.
Campus Estate for campus teams
Campus Estate includes concierge DNS, named support (Mac / support@wafcybersecurity.com), quarterly threat/tuning review, priority virtual-patch / count→promote, and the Advisor.
Talk to sales team — we invoice. This is not the $150 Stripe checkout.
Estate Brain
WAF Cybersecurity Advisor stays per site — you still click once.
Estate Brain is a read-only rollup across the estate: which sites need a human, which attack classes hit more than one site, and which virtual patch groups are still off. It does not block on its own.
Count mode before you block
Nothing is blocked on day one. Watch traffic for about 24 hours, then promote what's safe.
The Advisor is included on self-serve and Campus Estate — you still click once.
Read the count-mode explainer if you want the operators-first version of observe, then one-click promote.
Related
- Managed WAF for university and college websites
- Managed WAF for government and public-sector websites
- A managed WAF for your Drupal site
- Managed WAF for WordPress Multisite campus networks
- Managed WAF for Drupal Multisite campus estates
- All guides
- What is WAF count mode? (and why you start there)
- WAF false positives on forms: stop blocking legitimate POSTs
- WAF for athletics, news, and campus microsites
- Virtual patching websites with a managed WAF
- DIY WAF vs managed: console burden or operator?
- Managed WAF pricing: is $150/site worth it?
- Managed WAF for multi-site campus and agency estates
- Concierge DNS: we point your site at the managed WAF
- Free security scan
- Pricing
- Start a 14-day trial
- Partner with ProtectMyWebsite
- A client was taking 90 million requests an hour. The WAF was only half the fight.