Tencent Cloud WAF

Spec sheet

What it does

Tencent Cloud WAF is a cloud service that uses AI and rules to identify malicious web traffic and protect websites and business data.Read 15 Oct 2026 · intl.cloud.tencent.com

Integrations

Cloud-native WAF integrates with Tencent CLB, API Gateway and supported cloud-function or APISIX traffic paths.Read 15 Oct 2026 · cloud.tencent.com

Support

Tencent Cloud offers documentation and 24/7 ticket support on all plans, with paid tiers adding phone or chat and enterprise technical managers.Read 15 Oct 2026 · intl.cloud.tencent.com

Headquarters

Shenzhen, ChinaRead 4 Oct 2026 · cloud.tencent.com

Founded

1998Read 4 Oct 2026 · cloud.tencent.com

Anti-tampering

Core pages can be cached in WAF so cached content can substitute for a tampered origin page.Read 15 Oct 2026 · intl.cloud.tencent.com

BGP access

WAF advertises 30 dedicated BGP IP lines with intelligent node scheduling to reduce access latency.Read 15 Oct 2026 · intl.cloud.tencent.com

Bot management

AI and rules classify crawlers and bots so customers can allow friendly bots while delaying or blocking malicious scraping.Read 15 Oct 2026 · intl.cloud.tencent.com

CC attack defense

Smart CC protection analyzes abnormal origin responses and behavior, then combines access controls, bot checks and rate controls.Read 15 Oct 2026 · intl.cloud.tencent.com

Company legal entity

Tencent Cloud Computing (Beijing) Co., Ltd. is a PRC limited company established in 2010 and wholly owned by Tencent.Read 15 Oct 2026 · www1.hkexnews.hk

Company profile

LinkedIn lists Tencent Cloud as founded in 2013, headquartered in Nanshan District, Shenzhen, with more than 10,001 employees.Read 15 Oct 2026 · linkedin.com

Data leakage prevention

The product describes hiding the application origin, protecting during intrusion and replacing or masking sensitive data afterward.Read 15 Oct 2026 · intl.cloud.tencent.com

Deployment modes

It offers SaaS WAF using DNS CNAME proxying and cloud-native WAF that mirrors HTTP/HTTPS traffic from Tencent CLB.Read 15 Oct 2026 · intl.cloud.tencent.com

Documentation depth

The documentation index includes getting started, operations, security, integrations, FAQs, SLA, privacy/DPA material and API categories for assets, billing, rules, logs and security.Read 15 Oct 2026 · intl.cloud.tencent.com

External origins

SaaS WAF can protect public servers at Tencent Cloud, other clouds or IDC; mainland domains require ICP filing.Read 15 Oct 2026 · cloud.tencent.cn

Hybrid cloud

Enterprise and higher cloud-native editions can deploy protection nodes in a customer IDC or private cloud with centralized policies and logs.Read 15 Oct 2026 · cloud.tencent.cn

License status

WAF is presented as Tencent's proprietary hosted service; the public Apache 2.0 licenses apply to SDK repositories rather than the WAF service itself.Read 15 Oct 2026 · staticintl.cloudcachetci.com

Limit: abuse complaints

Trustpilot reviewers allege inadequate enforcement against scam, phishing and illegal-gambling domains hosted on Tencent infrastructure; these complaints concern Tencent hosting broadly, not specifically WAF.Read 15 Oct 2026 · trustpilot.com

Limit: G2 reviewers

G2 reviewers mention upgrade-only changes, difficult serverless or microservice learning, occasional lag and lengthy large-company implementations.Read 15 Oct 2026 · g2.com

Limit: Gartner reviewers

Reported weaknesses include localization and global-community gaps, complex advanced configuration, costly bot modules, limited reporting and AI false positives needing manual tuning.Read 15 Oct 2026 · gartner.com

LLM SDK/API

An SDK/API mode provides LLM content checks without moving a business domain to WAF, including prompt-injection and sensitive-data checks.Read 15 Oct 2026 · cloud.tencent.com

Logging limitation

Default attack logs are available, while full access-log search and retention require Tencent CLS log storage.Read 15 Oct 2026 · intl.cloud.tencent.com

Notable outage

Tencent's status history records a DDoS-protection incident on January 23, 2026 lasting from 18:42 to 18:50 UTC+8.Read 15 Oct 2026 · sh.status.cloud.tencent.com

Notable update

Tencent's release notes record October 2024 additions including AI bot protection, custom API security events and LLM attack-log parsing.Read 15 Oct 2026 · cloud.tencent.com

OWASP protection

The rule engine covers SQL injection, XSS, CSRF, unauthorized access, WebShell uploads and other OWASP Top 10 threats.Read 15 Oct 2026 · intl.cloud.tencent.com

Praise: G2 reviewers

G2 reviewers describe deployment as easy, pricing as affordable or aggressive, integration as broad and the service as responsive and scalable.Read 15 Oct 2026 · g2.com

Praise: Gartner reviewers

Reviewers repeatedly praise OWASP coverage, API and traffic analysis, Tencent ecosystem integration, stable onboarding and responsive support.Read 15 Oct 2026 · gartner.com

Pricing limitation

When peak QPS exceeds purchased capacity, WAF may enter sandbox isolation and stop guaranteeing SLA; bandwidth overage can also trigger throttling.Read 15 Oct 2026 · intl.cloud.tencent.com

Public API

The WAF API uses waf.tencentcloudapi.com, API version 2018-01-25 and a default limit of 20 requests per second.Read 15 Oct 2026 · cloud.tencent.com

Rating on G2

4.5 out of 5 from 3 reviewsRead 15 Oct 2026 · g2.com

Rating on Gartner Peer Insights

4.6 out of 5 from 10 reviewsRead 15 Oct 2026 · gartner.com

Rating on Trustpilot

2.0 out of 5 from 10 reviewsRead 15 Oct 2026 · trustpilot.com

SDKs and CLI

Tencent publishes API 3.0 SDKs for Go, C++, Java, Node.js, PHP, Python, Ruby and .NET plus a CLI, under Apache 2.0 licenses.Read 15 Oct 2026 · github.com

Security certifications

Tencent Cloud lists SOC 1, SOC 2, SOC 3 and ISO 27017 among its security certifications.Read 15 Oct 2026 · static.www.tencent.com

WAF Python package

The WAF Python SDK is installable with pip, supports Python 2.7 and Python 3 variants, and is Apache Software License 2.0.Read 15 Oct 2026 · pypi.org

Zero-day patching

Tencent says its security team monitors continuously and releases critical virtual patches within 24 hours.Read 15 Oct 2026 · intl.cloud.tencent.com

Plans and prices

Every Tencent Cloud WAF plan and price →

Where Specifiction places it

• Web Application Firewall Software#4 of 358.2