Yandex Smart Web Security release notes

Q3 2024Q3 2024

For traffic conditions that use regular expressions, you can now toggle between case-sensitive an case-insensitive string search. For more information, see Regular expression format.

Q2 2024Q2 2024

• Implemented Web Application Firewall (WAF) to protect web applications against external threats, such as SQL injections, cross-site scripting, and other vulnerabilities. WAF analyzes and filters HTTP requests blocking potentially malicious data.

  This feature is available at the Preview stage.

• Implemented Advanced Rate Limiter (ARL) to manage web app loads. ARL allows you to set a limit on the number of requests over a certain period of time. This prevents overload and ensures stable operation of the application.

  This feature is available at the Preview stage.

Q1 2024Q1 2024

• Released the service for general availability.
• Now you can select the Yandex SmartCaptcha user CAPTCHA.
• Added the limit for the maximum number of requests per second (RPS) in total for all load balancer virtual hosts connected to the same security profile.
• Added logs of a security profile connected to a virtual host to the Yandex Application Load Balancer log list.
• Implemented sending of management event audit logs in Yandex Audit Trails.

Q4 2023Q4 2023

• Now you can create security profiles from a preset template.
• Supported sending of metrics to Yandex Monitoring.
• Fixed the error of matching a string in the Host condition when creating a security rule.
• Improved the stability by implementing a new pattern for Application Load Balancer and Smart Web Security interaction.

Q3 2023Q3 2023

• The service is available at the Preview stage.