Load balancer security config review

Pick a namespace (or all of them), pull every HTTP load balancer's security configuration from F5 Distributed Cloud, and have an AI model flag what's missing or risky.

Load inventory

Load balancers loaded
6
Namespace scope
ai-gw

Feature coverage

Share of the 6 loaded load balancer(s) with each security feature configured — worst-covered first.

Rate Limiting
0/6 · 0.0%
Malicious User Detection
0/6 · 0.0%
Bot Defense
0/6 · 0.0%
Client-Side Defense
0/6 · 0.0%
HSTS
0/6 · 0.0%
Malware Protection
0/6 · 0.0%
IP Reputation / Threat Mesh
0/6 · 0.0%
Challenge Mechanisms (JS/Captcha/Policy)
0/6 · 0.0%
AI WAF Enhancements
5/6 · 83.3%
WAF / App Firewall
6/6 · 100.0%
WAF Exclusion Rules
6/6 · 100.0%
User Identification Policy
6/6 · 100.0%
L7 DDoS Protection
6/6 · 100.0%
CSRF Policy
6/6 · 100.0%
CORS Policy
6/6 · 100.0%
API Protection / Discovery
6/6 · 100.0%
Sensitive Data / Data Guard
6/6 · 100.0%
JWT Validation
6/6 · 100.0%
GraphQL Rules
6/6 · 100.0%
Trusted / Blocked Clients
6/6 · 100.0%
⬇ Export CSV No AI endpoint configured yet — add one in Settings.
ai-gw
ai-gw
aigw.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'ai-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements configured {'mitigate_high_medium_risk_action': {}}
ai-gw
aiwafau
aiwafau.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'ai-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements configured {'mitigate_high_medium_risk_action': {}}
ai-gw
investapp-aiwaf
aiwaf.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'ai-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements configured {'mitigate_high_medium_risk_action': {}}
ai-gw
investapp-regwaf
regwaf.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'reg-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements disabled {}
ai-gw
waf-efficacy-console
wafe.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'ai-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements configured {'mitigate_high_medium_risk_action': {}}
ai-gw
xc-cfg-rev
xccfg.apacpoc2.appsechero.com
Security Feature Status Configured Value
WAF / App Firewall configured {'tenant': 'apacpoc2-ovnoobbv', 'namespace': 'ai-gw', 'name': 'ai-waf'}
WAF Exclusion Rules configured {'waf_exclusion_inline_rules': {'rules': []}}
Rate Limiting disabled {}
User Identification Policy configured {}
Malicious User Detection disabled {}
L7 DDoS Protection configured {'l7_ddos_protection': {'mitigation_block': {}, 'default_rps_threshold': {}, 'clientside_action_none': {}, 'ddos_policy_none': {}}, 'ddos_mitigation_rules': []}
Bot Defense disabled {}
Client-Side Defense disabled {}
HSTS disabled False
CSRF Policy configured -
CORS Policy configured -
API Protection / Discovery configured {'api_protection_rules': None}
Malware Protection disabled {}
Sensitive Data / Data Guard configured {'data_guard_rules': [], 'default_sensitive_data_policy': {}, 'sensitive_data_disclosure_rules': None}
JWT Validation configured -
GraphQL Rules configured []
IP Reputation / Threat Mesh disabled {'disable_ip_reputation': {}, 'disable_threat_mesh': {}, 'disable_trust_client_ip_headers': {}}
Challenge Mechanisms (JS/Captcha/Policy) disabled True
Trusted / Blocked Clients configured {'trusted_clients': [], 'blocked_clients': []}
AI WAF Enhancements configured {'mitigate_high_medium_risk_action': {}}
Working…