WAF XBasic
Layer 7 Protection
Practical WAF protection for personal sites and entry-level platforms.
340₺/mo
- 1 Domain
- 1 Subdomain
- SEO-Friendly Whitelist
- Free SSL Certificate
- Smart Rate Limit Protection
Filter HTTP, GET, POST and L7 DDoS attacks, malicious bots and SQL injection attempts before they reach your server. Even if your site is hosted with another provider, you can protect it with Remote WAF.
Choose your package by the number of domains you want to protect. SEO-friendly whitelisting, free SSL and smart rate limiting are standard in every package.
Practical WAF protection for personal sites and entry-level platforms.
Advanced filtering for mid-sized corporate sites and dynamic applications.
Ideal for high-traffic e-commerce platforms and projects under heavy attack.
Full protection for large corporate infrastructures and high-volume attacks.
Swipe to see all 4 packages
Not sure which package is right for you? Write to us and we will work it out together.
There is no need to move your site: wherever it is hosted, it is protected by pointing your DNS.
Choose your package and our technical team registers your site's server IP details on the WAF infrastructure.
Point your domain's A or CNAME record to the WAF address we send you. Protection becomes active in about 10 minutes on average.
Incoming HTTP/HTTPS requests are analysed: malicious requests are blocked while real visitors and search engine bots reach your site.
It filters application-layer attacks that standard server firewalls cannot see, keeping your system resources for real visitors.
Ask an ExpertIncoming traffic is analysed in real time, and malicious bots and HTTP flood attacks are blocked before they reach your server.
Per-page request limits are set flexibly and spam requests from individual IPs are blocked automatically.
Google, Bing and Yandex bots are whitelisted, so your search engine indexing is unaffected.
An SSL certificate is issued automatically for every domain protected behind the WAF.
Even if your site is hosted with another provider, protection is activated by pointing your DNS.
Traffic is distributed to your site through a high-capacity load balancer.
As your needs grow you can move your WAF package up a tier whenever you like.
During an attack our security team supports you by tuning the rules specifically for your site.
Talk to our expert team and let us build the right Layer 7 protection for your web project together. You can also take a look at our live WAF panel.
Layer7 WAF is the most effective security layer for protecting your website against advanced cyber attacks. L7 WAF keeps your system up by protecting your web applications against complex application-layer attacks such as DDoS, SQL injection and XSS. If you are looking for a strong firewall for your website, you can buy Layer7 WAF for uninterrupted protection.
View Packages
Today, cyber attacks aimed at the application layer can get past standard server firewalls. buy Layer 7 protection lets you filter HTTP/HTTPS attacks aimed at your servers instantly and allow only genuine visitors onto your site. Layer 7 WAF protection so you can focus on your business without wasting system resources.
Buy L7 WAF NowGuided by high customer satisfaction and sustainable data centre investment, Light Hosting provides uninterrupted hosting to hundreds of companies and developers across Turkey.
State-of-the-art servers and Tier-3 data centre infrastructure.
Uninterrupted service for companies across Turkey.
Feel instant load performance on your websites thanks to high core speeds.
A qualified engineer replies to your support tickets in 15 minutes on average.
Clear answers to the most common questions about Layer 7 WAF protection.
Layer7 WAF (Web Application Firewall) is an advanced security layer that inspects the HTTP/HTTPS traffic reaching your web application in real time and blocks malicious bots, HTTP floods, SQL injection and XSS attacks before they reach your server.
No. Official search engine bots such as Googlebot, Yandexbot and Bingbot are on a dedicated whitelist in our WAF, so search engines keep crawling your site as usual.
Yes. With our Remote WAF infrastructure you can protect your site by pointing its DNS A/CNAME record, without moving the site.
Once your order is approved, our technical team sets up your IP details; after the DNS update, protection becomes active in about 10 minutes on average.
Rate limiting restricts excessive requests from a single IP address, automatically blocking spam requests that strain your site's database and server CPU.
Required cookies keep the site running. Analytics cookies are used only with your consent. Cookie Policy