WAPWeb Application Protection

Terms & Conditions

Last updated: 8 November 2026

These Terms govern your use of WAP (Web Application Protection), a security reverse-proxy service provided by OneFirewall Alliance LTD ("OneFirewall", "we", "us"). By creating an account or routing traffic through WAP you agree to these Terms on behalf of yourself and the organisation you represent.

1. The service

WAP receives HTTP requests addressed to domains you register, applies the security policy you configure and forwards permitted requests to the origin server you specify. WAP may block, rate-limit or reject requests according to your configuration and to protect the platform.

2. Eligibility and accounts

3. Your domains and origins

4. Acceptable use

Your use of WAP must comply with our Acceptable Use Policy.

5. Availability

We work to keep WAP available and secure but the service is provided "as is" without a guaranteed service level unless agreed separately in writing. Planned maintenance may briefly interrupt traffic.

6. Data

Traffic passes through WAP in transit. We process request metadata (such as IP addresses, host names, paths and user agents) to operate, secure and report on the service, as described in our Privacy Notice.

7. Liability

To the extent permitted by law, OneFirewall is not liable for indirect or consequential loss, or for loss caused by your configuration, your origin, or third-party attacks the service could not reasonably prevent. Nothing in these Terms limits liability that cannot be limited by law.

8. Changes and termination

We may update these Terms; material changes will be announced in the console. You may stop using WAP at any time by deleting your sites and pointing DNS away from the edge.

9. Governing law

These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.