Added

WAF detection on targets

Targets API WAF detection fields and filter

Two new fields are now included in target responses to indicate whether a web application firewall (WAF) has been detected that may interfere with scanning.

Endpoint: GET /v1/targets/

New response fields:

  • waf_provider - The name of the detected WAF provider (e.g. cloudflare), or null if no WAF has been detected.
  • waf_interference - true if a WAF is blocking scans on this target, false if a check has completed with no interference detected, or null if not yet determined.

New query parameter:

  • waf_interference (optional) - Filter targets by whether WAF interference has been detected. Set to true to return only targets where a WAF is blocking scans, or false to return targets with no detected interference.

For more information, see the API documentation for targets.