This document discusses web application firewalls (WAFs) and their usefulness. It begins by explaining that while developers should strive to build more secure software, system administrators need tools like WAFs to help protect insecure applications currently in use. It then discusses various WAF features and evaluation criteria, highlighting that WAFs can be deployed at the network level, as a reverse proxy, or embedded in a web server.