Legal notice — Only test websites you own or have explicit authorization to scan. Unauthorized use may violate applicable laws.

WAF-CHECKER.COM

WAF Security Tester

Test your Web Application Firewall against common attack payloads

Quick Start

  1. 1 Enter your target URL in the Target URL field (e.g., https://example.com)
  2. 2 Select HTTP Methods to test (GET, POST, PUT, DELETE)
  3. 3 Choose Attack Categories (SQL Injection, XSS, etc.)
  4. 4 Click Start Check to begin testing
Batch Test

Test multiple URLs at once (up to 100)

HTTP Tests

Test WAF bypass via headers & methods

Full Recon

CMS, technologies, DNS, WHOIS, SSL, subdomains, email security & more

Security Headers

Audit CSP, HSTS, X-Frame-Options & more

Speed Test

Page load performance, timing & optimization

SEO Audit

Meta tags, sitemap, pages, structured data & score

Customize your payloads

Add, edit or remove attack payloads. Click in the header to customize.