BSidesSF 2026 - Making WAF Mainstream: From Static Defenses to... (Roy Weisfeld, Surya Pentakota)

This talk explores the transformation of Web Application Firewall (WAF) operations from static defenses to adaptive, intelligent protection. The speakers, Roy Weisfeld and Surya Pentakota, share insights on leveraging data-driven methodologies, AI-assisted enforcement strategies, and effective rollout playbooks to enhance security measures. Through a case study related to TikTok's scale, attendees will gain practical knowledge on developing dynamic and cost-efficient web defenses that can scale with their organizations.