DDoS Guardian — AWS WAF rules assessment

A WAF review fails in two directions. Report a problem that is not real and the customer stops trusting everything else in the document. Miss a real one and they stay exposed. Both come from the same root cause: judging a configuration without the facts needed to judge it.

So the work is split. waf-assess.py decides everything decidable from the config text and writes those findings itself. What is left is either judgment about intent — which no script should fake — or a fact only an operator has. You gather the facts, verify the machine's claims, reason about the rest, and waf-report.py renders it.

Language

All output is English. Write the report, findings and headings in English regardless of the language of the user's message.

Pipeline