Services
Harmonium’s primary focus is supporting customers undertaking Akamai protection projects. Hourly security advisory engagements are available on a very limited basis.
What is a WAF (Web Application Firewall)?
In plain terms: a security checkpoint for your website
A modern WAF doesn’t rely on one “magic rule.” It works by layering multiple security controls — each one catches a different kind of threat — so the overall protection becomes more effective and more resilient.
- Known-bad patterns: Filters for common exploit techniques and clearly malicious requests, such as those published on the OWASP Top Ten list.
- Behavior signals: Flags traffic that behaves like automation, scraping, or credential stuffing. You as site-owner then have the choice of allowing or denying access to each category of traffic.
- Rate controls: Slows or blocks malicious bursts of traffic while allowing normal customer activity.
- Targeted hardening: Extra scrutiny is given to high-risk areas like login, checkout, forms, and APIs.
The result is practical: fewer incidents, fewer false positives, and a truly bespoke defensive posture that is tailored to how your site is actually or intended to be used.
Akamai protection projects
- Discovery: Identify key risk areas, such as login, checkout, forms, and APIs.
- Baseline protections: Set safe defaults and roll defenses out safely and progressively.
- Tuning: Reduce false positives, close obvious gaps, and document decisions.
- Operations: Change control guidance, incident support, and periodic review.
Hourly security advisory (limited)
Available for targeted work: architecture review, incident follow-up, hardening plans, or a “second set of eyes.”