AI-Powered WAF for F5 Distributed Cloud WAF is now GA. The goal is to help teams move from configuration-heavy, signature-by-signature tuning to outcome-based enforcement—so you can run WAF in blocking mode sooner, reduce operational friction, and improve detection while keeping false positives low.
What risk-based actions are (and are not)
Risk Scoring does not replace WAF signatures. It complements signatures by evaluating multiple signals per request - signatures, attack indicators, and ML-based classification, assigning each request a High / Medium / Low risk level.
The shift is operational: instead of asking teams to interpret individual signatures and their tuning tradeoffs, Risk Scoring provides an enforcement-ready outcome.
Demo
In this demo – you will see a simple banking application that is not properly protected by the F5 Distributed Cloud AI-Powered WAF. We will simulate a malicious payload in the login field generated by an LLM and see how the F5 Distributed Cloud AI-Powered WAF can protect the application when properly configured.
Who is eligible to use and trial the Risk WAF?
- Risk WAF reached General Availability (GA) as part of the 2025.10.0 release in March 2026.
- Existing customers will be able to trial Risk WAF for six months (until 6/30/2026)
Related Resources