Deploying a WAF vs. running a WAF program: The missing manual
Presented by: Billy Hoffman, Justin Tibbs
Originally aired on October 23 @ 5:00 AM - 5:30 AM EDT
You have a WAF. But can you say whether it’s covering every public-facing asset, actively blocking versus just watching, or quietly bypassed since the last review? Most security teams can’t. In this session, IONIX CTO, Billy Hoffman, and Presidio's VP of Cybersecurity, Justin Tibbs, share IONIX’s WAF Program Maturity Model — a framework that scores WAF programs across ten dimensions, from asset visibility to program ownership, against three maturity stages. Each stage lays out exactly what to fix next: know what should be protected, prove it is, and then make policy compliance the default and mitigation a matter of hours. IONIX and Presidio unpack the challenges that shape early programs and the practical steps that move teams to continuous, provable coverage. Walk away with a self-assessment framework and a next-step roadmap for any WAF you’ve deployed. This session is sponsored by IONIX.
English
