StenaGuard
WAF
WebconstructGlobal's proprietary Web Application Firewall. Engineered from the ground up for the threat landscape facing South African enterprises — L3 to L7 coverage, a custom rule DSL, bot detection, DDoS mitigation, and a real-time attack telemetry console.
Full-spectrum protection.
L3 to L7.
StenaGuard sits inline on every request — inspecting, scoring, and acting in under 2ms. Detection logic covers the OWASP Top 10, protocol anomalies, bot fingerprinting, rate-based DDoS patterns, and credential-stuffing signatures. Everything configurable per tenant, per route, per method.
- ✓ OWASP Top 10 — SQLi, XSS, Path Traversal, SSRF, XXE
- ✓ L3/L4 DDoS detection and rate-limit response
- ✓ Bot fingerprinting and challenge (CAPTCHA / JS proof)
- ✓ Credential stuffing detection via velocity analysis
- ✓ IP reputation scoring with SA-specific threat intelligence
- ✓ TLS 1.3 enforcement · Certificate transparency monitoring
Rules in plain
security logic.
StenaGuard ships with a proprietary rule DSL that lets security engineers express complex conditions in readable syntax — without touching code. Rules compile to an optimised internal representation evaluated per-request with zero regex backtracking penalties. Tenant isolation ensures rules from one client never affect another.
- ✓ Human-readable DSL — IF/AND/OR/THEN/ELSE logic
- ✓ IP, Geo, Header, Body, Path, Method predicates
- ✓ Actions: BLOCK · ALLOW · CHALLENGE · RATELIMIT · LOG
- ✓ Rule validation before deployment — no silent failures
- ✓ Tenant-scoped rule namespacing
The organizations that decide faster
win permanently.
Request access to WebconstructGlobal. Our team will design a deployment plan tailored to your operational environment — and have you live within a week.
No commitment required. Typically responded to within one business day.