Rule authoring, IP lists and the event feed sit behind one connection, so noticing a pattern and blocking it are the same sitting rather than two dashboards apart. The tools reach corporation scope, which makes changes wide by default — set the context you mean to work in first.
A management surface for the Fastly NGWAF API. It covers a corporation and the sites under it — security rules, IP lists, alerts, events and traffic analytics — so a firewall change happens where you are already describing the threat.
- Corporation-level security rules: read what is in force, add one, remove one
- Allow lists, block lists, and the shared lists that rules refer to
- The security event stream, and the ability to expire an event once it has been handled
- Traffic analytics, a corporation overview, and a ranked view of suspicious IPs
- Alert configuration, Cloud WAF settings and user administration
- A credential check and an environment walk-through, so you can confirm access and find the corp and site names before touching anything
Node.js 18 or newer and a Fastly NGWAF account with API access. Set FASTLY_NGWAF_EMAIL and FASTLY_NGWAF_TOKEN in the environment, or hand them over at runtime with set_credentials; a default corp and site can be set alongside them, so you do not name them on every call.
Build from source — clone the repository and build it, then point your client at the binary