"Detects WAF presence and identifies the vendor — Cloudflare, AWS WAF, Akamai, and 180+ others."
Before running active scans against a target, knowing whether it's protected by a WAF helps plan the assessment. A WAF may block or alert on aggressive scanning, rate-limit requests, or return misleading responses. Some WAFs also indicate a higher-value target worth deeper investigation.
PTK uses wafw00f to send crafted requests that trigger WAF-specific response patterns. It identifies not just whether a WAF is present, but which specific product — Cloudflare, AWS WAF, Akamai, Imperva, F5 BIG-IP, and 180+ others. No configurable options — it runs once and gives you a clear answer.