Protection from Application Layer 7 Attacks Cloudflare’s web application firewall (WAF) is built to protect your Microsoft Azure hosted website or application from malicious web application attacks, such as SQL injection, cross-site scripting, and comment spam.