# Imperva Cloud WAF integrations: sites and policies

> Add a site, create a policy and create a rule in Imperva Cloud WAF.

**Canonical page:** https://tray.ai/connectors/imperva-waf-integrations/
**Categories:** Security and compliance
**Connects through:** HTTP Connector

## Overview

Imperva Cloud WAF is a cloud web application firewall that sits in front of websites to block attacks, bots and DDoS traffic. Tray.ai connects to Imperva Cloud WAF through the HTTP Connector, so your workflows can call the Imperva Cloud WAF API alongside the rest of your stack.

## Use cases

### Sites

Read, create, delete, and manage sites in Imperva Cloud WAF from any Tray.ai workflow. The Imperva Cloud WAF API covers calls such as list sites and get a site.

- List sites
- Get a site
- Add a site

### Policies

Read, create, update, and delete policies in Imperva Cloud WAF from any Tray.ai workflow. The Imperva Cloud WAF API covers calls such as list policies and get a policy.

- List policies
- Get a policy
- Create a policy

### Custom rules

Read, create, update, and delete custom rules in Imperva Cloud WAF from any Tray.ai workflow. The Imperva Cloud WAF API covers calls such as create a rule and get a rule.

- Create a rule
- Get a rule
- Update a rule

### Attack incidents

Read attack incidents in Imperva Cloud WAF from any Tray.ai workflow. The Imperva Cloud WAF API covers calls such as list incidents and get incident details.

- List incidents
- Get incident details
- List insights

### Audit events

Read audit events in Imperva Cloud WAF from any Tray.ai workflow. The Imperva Cloud WAF API covers calls such as list audit events and get site statistics.

- List audit events
- Get site statistics

## Challenges Tray.ai solves

### Keeping Imperva Cloud WAF credentials out of logs

A raw API call usually means pasting a key or token into the request, where it ends up in step inputs, logs, and screenshots.

**How Tray.ai helps:** Store Imperva Cloud WAF credentials once as a Tray.ai authentication and reference them from the HTTP Connector. Tray.ai masks authentication values in logs, so the secret never shows up in a step's input or output.

### Going from the Imperva Cloud WAF API docs to a working call

Translating an example request from API docs into a workflow step means copying the method, URL, headers, and body by hand.

**How Tray.ai helps:** Paste a cURL example from the Imperva Cloud WAF API docs into the HTTP Connector and Tray.ai fills in the method, URL, headers, and body for you.

### Handling files and non-JSON responses

Not every API answers in JSON. Some return XML, files, or binary data, or expect a multipart upload.

**How Tray.ai helps:** The HTTP Connector parses JSON and XML responses, returns files you can pass to the next step, and sends multipart form data for uploads.

## Frequently asked questions

### Does Tray.ai connect to Imperva Cloud WAF?

Yes. Tray.ai connects to Imperva Cloud WAF through the HTTP Connector, which calls the Imperva Cloud WAF API directly. Any call the Imperva Cloud WAF API documents can run as a step in a Tray.ai workflow.

### How does Tray.ai authenticate with Imperva Cloud WAF?

The Imperva Cloud WAF API uses an API key in a request header. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.

### Can I get a dedicated Imperva Cloud WAF connector?

Imperva Cloud WAF runs through the HTTP Connector rather than a dedicated connector. If your team wants one, the Tray.ai connector SDK can build a dedicated Imperva Cloud WAF connector from the Imperva Cloud WAF API.

## Learn more

- Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/
- Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/
- Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/
- Book a demo: https://tray.ai/contact/