A console your team will enjoy
The ToutWAF console gives you full control: live attacks, explained events, sites, rules, bans and certificates, with seven themes, light and dark modes and a layout that works on a phone. Illustration with demonstration data.
The public version is a development version, 0.3.0-dev. No stable version exists yet.
Dashboard
Requests / Blocked
To watch2
Attacks
| Time | IP | Module | URL | Action |
|---|---|---|---|---|
| 12:04:51 | 185.220.101.7 | sqli | /?id=1' UNION SELECT | Ban |
| 12:04:49 | 45.155.205.12 | bots | /wp-login.php | Block |
| 12:04:46 | 103.74.19.88 | lfi | /download?f=../../etc/passwd | Block |
| 12:04:44 | 91.240.118.9 | xss | /q?s=<img onerror=x> | Block |
| 12:04:40 | 194.26.29.55 | rate | /api/login | Ban |
| 12:04:37 | 78.46.12.9 | ssrf | /fetch?u=http://169.254.169.254 | Block |
| 12:04:31 | 203.0.113.24 | - | /pricing | Allow |
Attacks
TW-2001- What
- SQL injection attempt
- Where
- Query parameter id on /product
- Why
- The value contains ' OR '1'='1, a classic always-true condition. Rule sqli.tautology, score 15 (threshold 5).
Impact preview: 0.01% of the last 7 days of traffic would be affected.
- ✓99.8% of traffic would be allowed
- !3 rules cause 95% of false positives
- ✓3 exceptions proposed, ready to review
Sites
| Template | Status | Certificate | |
|---|---|---|---|
| shop.example.com | WordPress | Protected Blocking | Let's Encrypt |
| api.example.com | API | Protected Blocking | Let's Encrypt |
| blog.example.com | Laravel | Protected Detection | Let's Encrypt |
| old.example.org | static | Protected Detection | - |
Rules
| Rule | Blocking |
|---|---|
sqli.tautology | |
xss.script-tag | |
lfi.traversal | |
rce.log4shell | |
wp.vpatch-cve |
Rule tester
Host: shop.example.com
Bans
| IP | Reason | Expires | Status |
|---|---|---|---|
| 185.220.101.7 | sqli x 12 | 00:58:12 | Ban |
| 194.26.29.55 | rate limit | 00:21:40 | Ban |
| 45.155.205.0/24 | bot scanner | 23:11:05 | Ban |
| AS60117 | blacklist | - | Ban |
| RU, KP | country | - | Ban |
Users and 2FA
| User | Role | 2FA |
|---|---|---|
| quentin | Admin | On |
| sarah | Operator | On |
| audit-bot | Viewer | - |
Interface illustration. Console available in 10 languages with RTL support.
Dashboard
Protection state per app, load, blocked attacks and recommended actions at a glance.
Live attacks
A real-time stream with filters by site, IP, module and action, and one-click ban.
Explained event
Every block is explained in plain language, with a one-click narrowest exception and an impact preview.
Sites
Add a site with a guided wizard, pick a template and see certificate and protection status.
Rules and tester
Enable, tune or write rules in a readable language and replay a request to see the decision.
Bans and lists
Manage bans, allow lists and deny lists by IP, network, ASN or country.
Users and 2FA
Roles, two-factor authentication, API tokens and a full audit trail.
Real console screenshots
The default look is Aurora in light mode with a blue accent. It is fully customisable: several themes, light or dark mode, your own accent colour.
