---
title: "How Voidhawk Works"
description: "Voidhawk reads attack intent, writes virtual patches to your WAF, and alerts your SOC. Any CDN or WAF. One click on AWS WAF."
url: https://voidhawk.ai/how-it-works
---

# Your WAF. Now with reasoning.

Your WAF enforces rules. Voidhawk reads attack intent, writes the missing rule, and alerts your SOC. Works with any CDN or WAF. One click on AWS WAF.

## Four steps. No code.

Voidhawk reasons. Your WAF enforces. Your team stays informed.

1. **Connect your CDN or WAF** (any vendor · one click on AWS): One click on AWS WAF. Guided setup for any other CDN or WAF. No application changes.
2. **Understand the intent** (intent, not signatures): Browse, buy, log in, or execute server code? Voidhawk reads the intent, even when an exploit changes its encoding.
3. **Write the virtual patch** (real time · your WAF): Voidhawk writes a rule to stop the exploit in real time. Your existing WAF enforces it.
4. **Alert your SOC** (as it happens): Your SOC gets the alert as it happens: what was attempted and what was stopped.

Requires: a website behind any CDN or WAF.

## Same WAF. Smarter defense.

### Your WAF on its own

- Enforces existing rules and managed rule sets.
- Matches exploits to known signatures.
- Waits for people to write new rules.

### Your WAF with Voidhawk

- Reads the intent behind each request.
- Recognizes exploits across encoding changes.
- Gets virtual patches in real time. Your SOC gets the alert.

## What Voidhawk doesn't do.

- **It doesn't find zero-days.** Voidhawk detects exploit attempts against your application. It does not discover vulnerabilities.
- **It doesn't replace patching.** You still patch. Voidhawk protects your app while you build the fix.
- **It doesn't blame the agents.** Legitimate agents serve your customers. Voidhawk targets exploits.
- **It doesn't lock you in.** Any CDN or WAF. Rules stay in your WAF. One click on AWS WAF.

## See what Voidhawk would catch.

Bring your stack. See how Voidhawk would protect it. Now in early access.

## Contact

- Book a technical call: https://calendly.com/aaron-ziosec/15-min-chat
- Early access: info@ziosec.com, or the form at https://voidhawk.ai/contact
- All pages, in Markdown: https://voidhawk.ai/llms.txt