> ## Content Index > Fetch the complete content index at: https://www.magicpages.co/llms.txt > Use this file to discover other available public pages before exploring further. # Web Application Firewall (WAF) On All Plans - URL: https://www.magicpages.co/roadmap/web-application-firewall-waf-on-all-plans/ - Published: 2025-05-31T07:31:00.000Z - Updated: 2026-01-02T17:01:25.000Z - Description: All Magic Pages sites now run on Bunny.net's Web Application Firewall for enhanced security, with a 7-day learning period to tailor protection without. - Author: Jannis Fedoruk-Betschki - Tags: Roadmap & Changelog 💡 As of 2 January 2026, all Magic Pages sites have an additional WAF component, in addition to Bunny.net Shield: Every website hosted on Magic Pages now benefits from Bunny.net's new Web Application Firewall, Bunny.net Shield: [Bunny Shield: Security simplifiedStop losing revenue and uptime due to web attacks. Sleep worry-free and focus on building your product, not putting out fires.![](https://www.magicpages.co/content/images/icon/icon-192x192-1.png)bunny.netLorenzo FaletraCEO![](https://www.magicpages.co/content/images/thumbnail/bunny-cdn-the-best-pay-as-you-go-content-delivery-network-on-the-market-1.jpg)](https://bunny.net/shield/?ref=magicpages.co) This enhances the security of all websites, no matter whether you're on the Starter or Pro plan. I have tested this on the Magic Pages website over the last few weeks, and while there were no dangerous incidents reported by the WAF, it found over 3000 requests that were suspicious (including a few DDoS attempts). The WAF is rolled out in the next days on all websites. ## Learning Period All websites will go through a **7-day learning period** by Bunny.net during which the WAF analyses your site's traffic patterns. Based on the patterns found, the WAF rules are then fine-tuned and applied to provide optimal protection without interfering with legitimate functionality. During this learning period, the WAF is active but operating in a more permissive mode to avoid false positives while it learns your site's normal behavior. ## Configuration In a future update of the customer portal, WAF rules will be editable for customers who want more granular control over their security settings. This will allow you to customize protection levels, whitelist specific IPs, and create custom security rules (paid feature, since Bunny.net charges for this). --- If you spot any issues with your website during or after the learning period, please reach out to me directly. While the WAF is designed to be transparent to legitimate traffic, every site is a bit different, and I want to make sure this doesn't interfere with your traffic.