The first WAF (Web Application Firewall) for SaaS applications (which currently have taken hold and become commonplace) was actually a Japanese team in Japan. This presentation will consist of the developer of Scutum who 3 years after the initial development will analyze the current state of affairs of web security in Japan and discuss the hidden side and future of WAF.With many sites operated in Japan being far from secure, efforts to contain security risks through the implementation of WAF have increased in recent years. With a track record including numerous sites, a WAF service developer with directly discuss the cost and benefits as well as the operation of WAF. Participating in this session you can expect to gain the following information: ・the architecture of Scutum ・whether or not and how much attacks on websites actually occur ・the actual effectiveness of WAF ・various case studies and examples ・issues and solutions related to WAF implementation ・the technology used to defend against attacks ・how WAF will develop in the future