A shield in front of campus sites. We run it.

Too many departmental sites, a small central IT team, and forms that cannot go down. We put a managed web application firewall in front of student portals, departmental CMS, and admissions. We run it.

Campus Estate for the whole campus

Campus Estate is for higher-ed / multi-site campus teams. Quote on request — Talk to sales team. We do not publish Estate list prices.

Included: concierge DNS, named support (Mac / support@wafcybersecurity.com), quarterly threat/tuning review, priority virtual-patch / count→promote, and Promote Copilot.

A single departmental site or a small shop stays on $150/site/mo with a 14-day trial — we do not force every .edu through Estate. Self-serve also includes Promote Copilot.

Talk to sales team See pricing

An estate, not one homepage

Campus sites multiply — schools, athletics, news, research, and department CMS installs, often WordPress and Drupal together. Central IT cannot staff another console for each one.

Add a site, point DNS, see what's watched and what's blocked. Same shield on every property.

When a flood hits the shared VIP, use the first-hour playbook — confirm edge vs origin before anyone panic-promotes.

Campus DDoS response: keep .edu sites up under flood

Estate Brain is coming

Promote Copilot is live today — per site, and you still click once.

Estate Brain will roll risk across the campus estate so central IT can see which sites need a human. It is not live.

Estate Brain — coming

Don't take down registration or financial aid

A false positive on a registration or financial-aid form is an outage students feel. Rules start in count. After 24 hours, your dashboard shows what's safe to block — one click.

Promote Copilot is included — you still click once. You keep the site; we run the shield.

Operator deep-dive on scrapers, admissions bot protection, and credential stuffing: WAF bot management for campus and agency sites.

Friday CMS CVE week: emergency virtual patch in count first, then promote while departmental WordPress and Drupal catch up.

Student portals (SIS, LMS, SSO, registration) need the same count-first path — deny-first breaks login. See WAF for student portals without breaking SSO.

WAF bot management for campus and agency sites Emergency virtual patching when a CMS CVE drops WAF for student portals without breaking SSO

One DNS change — or we do DNS

Subdomain: one CNAME. Apex: delegate nameservers once. Or request concierge setup and we do DNS. Hosting and the CMS stay where they are.

$150/site/mo, 14-day trial for a single-site experiment. Experience protecting higher-education and public-sector sites.

For the longer operator cut — university website firewall, college website WAF, and campus managed WAF — read Managed WAF for higher education websites.

Managed WAF for higher education websites

Campus Estate, or try one site

Talk to sales team Scan a campus site — free Start a 14-day trial